package-search
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
unity-mcp-clicommand-line tool to perform package searches and retrieve version information. - [EXTERNAL_DOWNLOADS]: The documentation references the
unity-mcp-clipackage, which can be installed vianpmor executed directly usingnpx. This tool is an official resource associated with the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves package metadata, including descriptions and names, from the Unity Package Manager registry and local project files. This content is then provided to the agent.
- Ingestion points: User-provided
queryparameter inSKILL.mdused for searching. - Boundary markers: None explicitly defined in the output schema to separate package data from agent instructions.
- Capability inventory: Execution of
unity-mcp-clito read registry and local file system data. - Sanitization: Not specified for the registry-sourced descriptions.
Audit Metadata