screenshot-camera

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The instructions suggest installing the unity-mcp-cli package globally via NPM (npm install -g unity-mcp-cli) or using it via npx. While this is the core functionality of the skill, it involves an external dependency from a public registry.
  • [COMMAND_EXECUTION]: The skill relies on executing the unity-mcp-cli command-line utility to perform its primary function of capturing screenshots from the Unity environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Unity environment (such as GameObject paths, names, and asset identifiers) which are supplied as input parameters and could potentially be manipulated.
  • Ingestion points: cameraRef object fields (path, name, assetPath, assetGuid) in SKILL.md.
  • Boundary markers: None present.
  • Capability inventory: CLI command execution via unity-mcp-cli as demonstrated in SKILL.md usage examples.
  • Sanitization: No explicit sanitization or validation of the provided Unity hierarchy paths or asset identifiers is described in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:31 PM