skills/lovecatisgood-sudo/3d-asset-generation-blender-unity-game-development-skills/unity-mcp-game-development/Snyk
unity-mcp-game-development
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The runtime workflow in SKILL.md has the agent observe and read the Unity Editor Console and project/editor state via Unity MCP tools (e.g., “Read Console” / “Read Console after every script or package change”), which includes free-text logs generated from project content and can be influenced indirectly by user-authored text in the project.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata