scene-open

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation suggests installing the unity-mcp-cli package via npm. This is a vendor-provided tool necessary for the skill's intended functionality within the Unity development environment.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute local shell commands using unity-mcp-cli to perform scene management tasks. This is restricted to the specific task of opening project assets.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes asset references (paths and GUIDs) provided as input. While this represents a data ingestion surface, the risk is minimal as the data is used to parameterize a specific Unity editor command.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 12:15 PM