gameobject-component-list-all
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation recommends the installation of an external third-party package,
unity-mcp-cli, via npm (npm install -g unity-mcp-cliornpx). This tool is necessary for executing the skill but originates from a non-whitelisted source. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted search strings which could potentially influence agent behavior if the results are processed downstream without care.
- Ingestion points: The
searchinput parameter in the tool invocation JSON. - Boundary markers: None specified in the documentation or input schema.
- Capability inventory: The tool retrieves a list of C# class names (strings) from the Unity environment.
- Sanitization: There is no evidence of input validation or sanitization for the search query.
Audit Metadata