assets-find

SUSPICIOUS: the skill's stated purpose is narrow and plausible, but it relies on a third-party CLI and hosted MCP service that may handle credentials and project metadata. This is not clearly malicious, yet the install and data-flow footprint is broader than a simple local Unity asset search helper and carries medium risk.