assets-prefab-instantiate
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
unity-mcp-clipackage from the npm registry or run it vianpx. This is the core dependency required for the skill to function. - [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands through
unity-mcp-clito instantiate objects within a Unity project environment. - [INDIRECT_PROMPT_INJECTION]: The skill accepts arbitrary string inputs for asset paths and object names which could potentially be manipulated if the agent is processing untrusted data.
- Ingestion points: The
prefabAssetPathandgameObjectPathparameters in the tool's input schema. - Boundary markers: None present in the instructions to delimit or validate these inputs.
- Capability inventory: The skill uses
unity-mcp-clito perform file and scene operations in the Unity editor. - Sanitization: No explicit input sanitization or validation logic is defined within the skill documentation.
Audit Metadata