The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill's core functionality is to compile and run C# code snippets stored in a project's local directory (.unity-cli/snippets~/). These snippets are executed via a Python wrapper within the Unity Editor context.
Evidence: The cs snippets use <id> command executes C# code blocks containing a static Run(...) method.
Risk: Runtime compilation and execution of dynamically retrieved source code allows for high-impact operations (file access, asset modification) based on data that may not be verified for safety.
[INDIRECT_PROMPT_INJECTION]: The skill relies on external data stored in the project filesystem that may be influenced by untrusted sources.
Ingestion points: The skill reads snippet definitions, including code and metadata, from the .unity-cli/snippets~/ directory.
Boundary markers: The instructions mandate using the CLI tool (cs snippets) rather than direct file access (ls or Read), providing a layer of abstraction.
Capability inventory: The system can execute C# code with access to UnityEngine and AssetDatabase APIs, and can modify project files through the mutates safety class.
Sanitization: While the skill categorizes snippets into read-only and mutates, there is no automated sanitization or sandboxing of the C# code itself, relying on the agent or user to verify the snippet's intent.
[COMMAND_EXECUTION]: The skill executes a Python script located in the user's home directory.
Evidence: Instructions explicitly define cs as shorthand for python "$HOME/.unity-cli-plugin/current/cli/cs.py".
Context: This is a fixed path to the tool's own executable, but it runs with the user's full shell privileges.

unity-cli-snippets