assets-prefab-instantiate

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the unity-mcp-cli package from the npm registry or run it via npx. This is the core dependency required for the skill to function.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands through unity-mcp-cli to instantiate objects within a Unity project environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts arbitrary string inputs for asset paths and object names which could potentially be manipulated if the agent is processing untrusted data.
  • Ingestion points: The prefabAssetPath and gameObjectPath parameters in the tool's input schema.
  • Boundary markers: None present in the instructions to delimit or validate these inputs.
  • Capability inventory: The skill uses unity-mcp-cli to perform file and scene operations in the Unity editor.
  • Sanitization: No explicit input sanitization or validation logic is defined within the skill documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:32 PM