tool-set-enabled-state
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The Troubleshooting section mentions installing
unity-mcp-clivia npm. This is an official utility provided by the vendor for managing the execution environment and is consistent with the skill's purpose. - [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection through its tool-toggle mechanism.
- Ingestion points: The
toolsarray input containing tool names. - Boundary markers: None provided in the documentation.
- Capability inventory: The skill can modify the operational state of other tools and persist these changes through
UnityMcpPluginEditor.Instance.Save(). - Sanitization: Not explicitly documented, though the skill performs resolution against exact-name lookups which mitigates random string execution.
Audit Metadata