ping
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill logic is limited to a simple string echo. It does not have permissions to access the filesystem, environment variables, or external network resources.
- [EXTERNAL_DOWNLOADS]: The skill documentation references the unity-mcp-cli tool available via npm. This is a standard dependency for the execution environment and does not pose an inherent security risk.
- [PROMPT_INJECTION]: The skill provides an ingestion point for untrusted data. 1. Ingestion points: The 'message' parameter in SKILL.md. 2. Boundary markers: None present in the schema. 3. Capability inventory: No side-effect capabilities are present in the skill; it only returns the input message. 4. Sanitization: None present. The risk of exploitation is negligible due to the absence of sensitive capabilities.
Audit Metadata