unity-skill-generate
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing the
unity-mcp-clipackage via npm. This is a standard prerequisite for the skill's intended functionality within the Unity ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes local data from the Unity project (specified by the
pathinput) to generate new skill definitions. This creates a surface where untrusted content in source files could influence the generated output. - Ingestion points: Files located within the Unity project directory provided in the
pathparameter. - Boundary markers: None specified in the skill instructions.
- Capability inventory: The tool reads project metadata to generate structured skill files.
- Sanitization: Not explicitly documented; processing logic resides within the external CLI tool.
Audit Metadata