assets-shader-get-data
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation recommends installing the
unity-mcp-clipackage via NPM. This tool is the primary interface for executing the skill's functionality. The package name aligns with the author's identity and the skill's specific purpose for Unity project analysis.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes local Unity shader files. Although these files contain external data, the skill only provides inspection capabilities and lacks exploitable tools for file modification or code execution.\n - Ingestion points: Unity project Assets and Packages folders via
assetRefparameter inSKILL.md.\n - Boundary markers: None identified.\n
- Capability inventory: No file writing, command execution, or network capabilities are exposed by this skill.\n
- Sanitization: Not explicitly documented.
Audit Metadata