script-delete
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill accepts file paths from user-provided data to perform deletions, which creates a surface for indirect prompt injection. If the validation logic is insufficient, an attacker might attempt to delete unintended files. The skill description notes that it validates that all paths end in .cs and exist on disk.
- Ingestion points: The
filesinput parameter in SKILL.md. - Boundary markers: None identified.
- Capability inventory: File system deletion and Unity AssetDatabase synchronization.
- Sanitization: Verification of the .cs extension as described in the behavior section.
- [COMMAND_EXECUTION]: The skill functions by executing the
unity-mcp-cliutility to handle file operations and interact with the Unity Editor. - Evidence: The
unity-mcp-cli run-tool script-deletecommand used in the instructions. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions to download and install
unity-mcp-clivia the npm package registry. - Evidence: Recommendation to run
npm install -g unity-mcp-cliin the troubleshooting section.
Audit Metadata