package-remove

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to execute shell commands via the unity-mcp-cli tool to modify the Unity project manifest and trigger package resolution.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation directs users to install an external package, unity-mcp-cli, from the NPM registry. It does not specify a version or provide integrity verification for this dependency.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests a packageId string which is subsequently used as an argument in a shell command, creating a potential vector for command injection.
  • Ingestion points: The packageId field defined in the input schema of SKILL.md.
  • Boundary markers: No delimiters or explicit warnings to ignore embedded instructions are present.
  • Capability inventory: Execution of shell commands and project manifest modification via unity-mcp-cli.
  • Sanitization: The skill description does not document any validation or sanitization procedures for the packageId input.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:31 PM