tool-set-enabled-state
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation suggests installing the
unity-mcp-clipackage from the npm registry. This is a third-party dependency not associated with a known trusted vendor.\n- [COMMAND_EXECUTION]: The skill executes shell commands usingunity-mcp-clito manage tool states.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides a mechanism to modify the agent's enabled tools, creating a surface for potential manipulation.\n - Ingestion points: The
toolsarray in the input JSON (SKILL.md).\n - Boundary markers: None present.\n
- Capability inventory: Ability to enable or disable any MCP tool via the CLI.\n
- Sanitization: None present.
Audit Metadata