object-get-data
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
unity-mcp-clipackage from the NPM registry to enable its core functionality. - [COMMAND_EXECUTION]: The skill executes the
unity-mcp-clitool to interact with the Unity environment and retrieve serialized data. - [PROMPT_INJECTION]: The skill processes properties and fields from external Unity objects, which provides a surface for indirect prompt injection. 1. Ingestion points: Unity object properties and fields retrieved via
unity-mcp-cli. 2. Boundary markers: No explicit markers are defined to separate data from instructions. 3. Capability inventory: Shell command execution through theunity-mcp-clitool. 4. Sanitization: No sanitization of the retrieved object data is described.
Audit Metadata