niagara-systems
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides methods to read and process data from external Unreal Engine assets (Niagara Systems). This creates a potential attack surface if the assets contain untrusted data designed to influence the agent's behavior.
- Ingestion points: Data is ingested via
unreal.NiagaraService.list_rapid_iteration_params,unreal.NiagaraService.compare_systems, andunreal.NiagaraService.get_emitter_lifecycleas described inSKILL.mdandscripts/create_system.txt. - Boundary markers: No specific delimiters or safety instructions are defined to separate asset data from the agent's command context.
- Capability inventory: The skill utilizes
execute_python_codeandcall_toolfor engine interaction and file operations. - Sanitization: The instructions do not specify any validation or sanitization routines for the data retrieved from the Niagara assets.
- [DYNAMIC_EXECUTION]: The skill's primary functionality relies on the
execute_python_codetool to run dynamically generated Python scripts that interface with theunrealmodule. While this is the intended use case for editor automation, it involves the execution of code generated by the agent at runtime.
Audit Metadata