assets-material-create
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes parameters for asset paths and shader names that represent a surface for indirect injection if provided by untrusted sources. • Ingestion points: assetPath and shaderName in SKILL.md. • Boundary markers: Not present in the instruction template. • Capability inventory: Modifies the Unity project structure by creating assets and refreshing the database. • Sanitization: The behavior description notes validation of the path format and shader resolution.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The troubleshooting section suggests installing unity-mcp-cli via npm. This is a standard developer tool dependency for the skill's functionality.
Audit Metadata