script-execute

SUSPICIOUS: the skill’s main function is intentional arbitrary code execution in Unity, which is aligned with its purpose but inherently high-risk for an AI agent. Install provenance for the CLI looks reasonably legitimate, but the capability scope is broad and upstream hosted MCP/auth endpoints add trust-boundary concerns.