The Agent Skills Directory

[DYNAMIC_EXECUTION]: The module scripts/cli/core_bridge.py dynamically modifies the Python search path (sys.path) to include directories found within the target Unity project's Packages/ or Library/PackageCache/ folders.
The skill then imports the csharpconsole_core implementation from these locations. If the Unity project contains a malicious package at the expected path, this could lead to arbitrary code execution within the agent's Python environment.
[COMMAND_EXECUTION]: The skill performs shell command execution via the subprocess module in scripts/cli/cs.py for two primary purposes:
Querying version tags from remote git repositories during setup using git ls-remote.
Starting background processes for log monitoring using subprocess.Popen.
[EXTERNAL_DOWNLOADS]: The cs setup command in scripts/cli/cs.py configures the Unity project to download a package from the vendor's repository: https://github.com/niqibiao/unity-csharpconsole.git.
[DATA_EXFILTRATION]: The cs pull and cs logs subcommands in scripts/cli/cs.py provide a mechanism to read and retrieve arbitrary files from the filesystem where the Unity Editor or Player process is running.
This capability is intended for logs and diagnostic data but can access any file readable by the Unity process.

unity-cli