Skills
Navigate
skills/idocohen560/claude-unity-game-studio/gameobject-component-modify/Gen Agent Trust Hub

gameobject-component-modify

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the unity-mcp-cli package, directing users to install it via npm or run it via npx. This tool is a core component of the author's Unity-MCP ecosystem and is necessary for the skill's operation.
  • [COMMAND_EXECUTION]: The skill provides instructions to run the unity-mcp-cli command to modify GameObject components. This command execution is the primary function of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts serialized component data (componentDiff) as input, which represents an attack surface for indirect prompt injection if the data being processed originates from an untrusted source.
  • Ingestion points: componentDiff input parameter in SKILL.md.
  • Boundary markers: None specified in the prompt template or instructions.
  • Capability inventory: Shell command execution via unity-mcp-cli defined in SKILL.md.
  • Sanitization: Not explicitly mentioned in the skill instructions; the system relies on the external CLI tool for data validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:31 PM