unreal-mcp

Warn

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill utilizes the ProgrammaticToolset.execute_tool_script tool to execute Python scripts provided as strings at runtime. While the documentation describes a restricted sandbox environment with limited imports (such as json, math, and re), this functionality allows the agent to dynamically assemble and run orchestration logic within the Unreal Editor process.
  • [DYNAMIC_EXECUTION]: Provides functionality to author, modify, and compile Unreal Engine Blueprints using a Domain Specific Language (DSL) via the BlueprintTools.write_graph_dsl tool. This allows the agent to create and inject executable event-driven logic into the engine at runtime.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the live Unreal Editor environment, including actor properties and system logs, which creates a surface for indirect prompt injection if the editor environment contains maliciously crafted metadata.
  • Ingestion points: Untrusted data enters the agent's context through tools like LogsToolset.GetLogEntries, ObjectTools.get_properties, and SceneTools.find_actors as described in references/tool-surface.md.
  • Boundary markers: There are no documented instructions for the agent to treat engine-retrieved data as untrusted or to use specific delimiters to isolate it from instruction context.
  • Capability inventory: The agent possesses extensive capabilities, including writing to the local file system (AssetTools.save_assets, write_file), executing editor console commands, and making network requests to the local MCP server.
  • Sanitization: No sanitization, escaping, or validation logic is specified for data retrieved from the editor process before it is utilized in subsequent prompts.
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the Unreal Editor's internal console command interface for various administrative and diagnostic tasks (e.g., HighResShot, ModelContextProtocol.RefreshTools). It also suggests the use of the ffprobe utility for performing objective signal analysis on rendered image files.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 12, 2026, 04:07 AM