gameobject-component-get
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
unity-mcp-clitool to retrieve component data. It explicitly recommends using stdin redirection (<<'EOF') when passing JSON inputs, which is a security best practice that prevents shell command injection by ensuring the input is not parsed as shell arguments. - [EXTERNAL_DOWNLOADS]: The documentation suggests installing the
unity-mcp-clipackage vianpm. This package is consistent with the author's (ivanmurzak) namespace and infrastructure, representing a standard installation procedure for the vendor's toolset. - [SAFE]: The skill is designed for data inspection (reading fields and properties of Unity components). It does not request excessive permissions, access sensitive system files (like SSH keys or environment variables), or attempt to establish unauthorized network connections.
Audit Metadata