The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill facilitates the writing of arbitrary C# code to the local file system (e.g., 'Assets/Skills/MySkill.cs'). Because the Unity Editor environment typically auto-compiles scripts added to the Assets folder, the agent effectively gains the ability to execute any command or logic within the context of the Unity Editor process.
[DYNAMIC_EXECUTION]: The tool is designed to generate executable source code at runtime. The instructions provide templates for creating tools that interact with sensitive Unity APIs (MainThread, AssetDatabase, EditorUtility), which can be leveraged to perform unauthorized system operations or UI manipulation.
[PERSISTENCE]: Scripts created by this tool are saved as files on disk. This allows any malicious logic injected by an attacker to persist across sessions and remain active every time the Unity project is opened or recompiled.
[INDIRECT_PROMPT_INJECTION]: The code input parameter represents a high-risk attack surface. If the agent processes untrusted external data (such as user comments or web content) and uses it to generate the C# script, an attacker could inject malicious code that the agent then saves and executes without user intervention.

unity-skill-create