assets-move

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill interacts with the local file system by executing the unity-mcp-cli command-line utility. It passes source and destination paths as arguments to move or rename assets within a Unity project environment.- [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing the unity-mcp-cli package via the NPM registry. This is a standard dependency installation for the intended functionality of the skill and does not involve suspicious or unknown sources.- [PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it ingests sourcePaths and destinationPaths that could originate from untrusted data sources. However, the input is constrained by a JSON schema and there are no instructions present that attempt to override agent behavior or safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 12:15 PM