screenshot-camera
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions suggest installing the
unity-mcp-clipackage globally via NPM (npm install -g unity-mcp-cli) or using it via npx. While this is the core functionality of the skill, it involves an external dependency from a public registry. - [COMMAND_EXECUTION]: The skill relies on executing the
unity-mcp-clicommand-line utility to perform its primary function of capturing screenshots from the Unity environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Unity environment (such as GameObject paths, names, and asset identifiers) which are supplied as input parameters and could potentially be manipulated.
- Ingestion points:
cameraRefobject fields (path,name,assetPath,assetGuid) inSKILL.md. - Boundary markers: None present.
- Capability inventory: CLI command execution via
unity-mcp-clias demonstrated inSKILL.mdusage examples. - Sanitization: No explicit sanitization or validation of the provided Unity hierarchy paths or asset identifiers is described in the skill instructions.
Audit Metadata