unity-mcp-weapon
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides detailed guides and examples for executing commands within the Unity Editor using tools such as
Unity_ManageSceneandUnity_ManageGameObjectvia the Model Context Protocol. It also references the use of custom Unity menu commands likeDrift → Setup Tier 0 Gray Boxfor deterministic scene assembly. - [EXTERNAL_DOWNLOADS]: Documents dependencies on Unity packages including the official
com.unity.ai.assistantand the community-supportedcom.coplaydev.unity-mcp. These are standard components within the Unity development ecosystem. The skill also mentions an example HTTP MCP serverhttps://n8n.voyze.ai/mcp-server/httpin a configuration template, which is identified as an unrelated external resource. - [PROMPT_INJECTION]: Identifies a potential attack surface where the agent reads Unity console logs via the
Unity_ReadConsoletool (referenced inguides/03-driving-the-editor.md). While the skill does not contain malicious instructions, it lacks explicit boundary markers for data ingested from the console. Ingestion point:Unity_ReadConsole. Boundary markers: Absent. Capability inventory:Unity_ManageScene,Unity_ManageGameObject, and custom menu command execution. Sanitization: No specific sanitization or filtering of console output is documented.
Audit Metadata