assets-find
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references the installation of
unity-mcp-clivianpm. This is a standard dependency for the skill's intended functionality and is sourced from a well-known public registry.\n- [COMMAND_EXECUTION]: The skill usesunity-mcp-clito execute asset database searches. This usage is restricted to the specific search parameters defined in the skill's input schema.\n- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests data from the Unity project file system.\n - Ingestion points: Asset filenames, labels, and types are retrieved from the local Unity database via the
unity-mcp-clitool.\n - Boundary markers: The output is formatted as structured JSON, providing separation between data and instructions.\n
- Capability inventory: The skill executes search commands using
unity-mcp-cli.\n - Sanitization: Standard structured output is used, but the skill does not specify filtering or escaping of retrieved asset content.
Audit Metadata