unreal-mcp
Warn
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes the
ProgrammaticToolset.execute_tool_scripttool to execute Python scripts provided as strings at runtime. While the documentation describes a restricted sandbox environment with limited imports (such asjson,math, andre), this functionality allows the agent to dynamically assemble and run orchestration logic within the Unreal Editor process. - [DYNAMIC_EXECUTION]: Provides functionality to author, modify, and compile Unreal Engine Blueprints using a Domain Specific Language (DSL) via the
BlueprintTools.write_graph_dsltool. This allows the agent to create and inject executable event-driven logic into the engine at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the live Unreal Editor environment, including actor properties and system logs, which creates a surface for indirect prompt injection if the editor environment contains maliciously crafted metadata.
- Ingestion points: Untrusted data enters the agent's context through tools like
LogsToolset.GetLogEntries,ObjectTools.get_properties, andSceneTools.find_actorsas described inreferences/tool-surface.md. - Boundary markers: There are no documented instructions for the agent to treat engine-retrieved data as untrusted or to use specific delimiters to isolate it from instruction context.
- Capability inventory: The agent possesses extensive capabilities, including writing to the local file system (
AssetTools.save_assets,write_file), executing editor console commands, and making network requests to the local MCP server. - Sanitization: No sanitization, escaping, or validation logic is specified for data retrieved from the editor process before it is utilized in subsequent prompts.
- [COMMAND_EXECUTION]: The skill instructs the agent to use the Unreal Editor's internal console command interface for various administrative and diagnostic tasks (e.g.,
HighResShot,ModelContextProtocol.RefreshTools). It also suggests the use of theffprobeutility for performing objective signal analysis on rendered image files.
Audit Metadata