scene-create
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run the
unity-mcp-clicommand to create scenes. It recommends using a heredoc (EOF) for passing complex JSON input, which is a defensive measure to prevent shell interpretation issues.- [EXTERNAL_DOWNLOADS]: The skill suggests installing theunity-mcp-clipackage from the NPM registry vianpm install -gornpxif the tool is not found.- [INDIRECT_PROMPT_INJECTION]: The skill accepts a user-suppliedpathparameter to define where the scene file is created. - Ingestion points: The
pathparameter defined in the input schema withinSKILL.md. - Boundary markers: No delimiters or specific instructions are provided to the agent to treat this data as potentially untrusted.
- Capability inventory: The skill executes shell commands and modifies the file system (creating
.unityfiles) via the CLI tool. - Sanitization: The skill does not define any sanitization logic, relying instead on the underlying CLI tool to validate the file path.
Audit Metadata