unity-mcp-game-development

Warn

Audited by Snyk on Aug 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The runtime workflow in SKILL.md has the agent observe and read the Unity Editor Console and project/editor state via Unity MCP tools (e.g., “Read Console” / “Read Console after every script or package change”), which includes free-text logs generated from project content and can be influenced indirectly by user-authored text in the project.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 24, 2026, 04:33 PM
Issues
1