package-remove
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute shell commands via the
unity-mcp-clitool to modify the Unity project manifest and trigger package resolution. - [EXTERNAL_DOWNLOADS]: The skill's documentation directs users to install an external package,
unity-mcp-cli, from the NPM registry. It does not specify a version or provide integrity verification for this dependency. - [INDIRECT_PROMPT_INJECTION]: The skill ingests a
packageIdstring which is subsequently used as an argument in a shell command, creating a potential vector for command injection. - Ingestion points: The
packageIdfield defined in the input schema of SKILL.md. - Boundary markers: No delimiters or explicit warnings to ignore embedded instructions are present.
- Capability inventory: Execution of shell commands and project manifest modification via
unity-mcp-cli. - Sanitization: The skill description does not document any validation or sanitization procedures for the
packageIdinput.
Audit Metadata