package-search

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the unity-mcp-cli command-line tool to perform package searches and retrieve version information.
  • [EXTERNAL_DOWNLOADS]: The documentation references the unity-mcp-cli package, which can be installed via npm or executed directly using npx. This tool is an official resource associated with the skill's functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill retrieves package metadata, including descriptions and names, from the Unity Package Manager registry and local project files. This content is then provided to the agent.
  • Ingestion points: User-provided query parameter in SKILL.md used for searching.
  • Boundary markers: None explicitly defined in the output schema to separate package data from agent instructions.
  • Capability inventory: Execution of unity-mcp-cli to read registry and local file system data.
  • Sanitization: Not specified for the registry-sourced descriptions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 12:15 PM