screenshot-isolated
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references the installation of unity-mcp-cli via npm, which is a vendor-owned package required for the skill's operation.
- [COMMAND_EXECUTION]: The skill provides instructions for executing the unity-mcp-cli tool to interface with the Unity Editor.
- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection through object references and light configurations. 1. Ingestion points: Parameters gameObjectRef and lights in SKILL.md. 2. Boundary markers: None. 3. Capability inventory: Image rendering and GameObject state manipulation. 4. Sanitization: Handled by the underlying CLI tool.
Audit Metadata