scenario-unreal-performance
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The toolkit in
scripts/ue_perf.pyutilizesimportlib.import_moduleto dynamically load sibling utility modules from thescenario-unreal-expertskill directory. Additionally,references/procedures.mddemonstrates the use ofexec_moduleto load and run thejob_probe_perf.pyscript at runtime.\n- [COMMAND_EXECUTION]: The skill performs extensive interaction with the local system and the Unreal Engine toolchain viasubprocess.run, including running theTraceQueryJSONL parser, system thermal monitoring utilities likepmset, and launching the project's game binaries for profiling.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection. Ingestion points: Processes external data from Unreal Engine trace files (JSONL) and engine logs (stat unit, ProfileGPU) withinscripts/ue_perf.py. Boundary markers: Lacks explicit delimiters or warnings to ignore embedded instructions in the ingested data. Capability inventory: Includes shell command execution viasubprocess.run, remote execution in Unreal Editor viaue_remote.exec, and project configuration modification. Sanitization: Employs regex-based parsing to extract numeric values from logs, providing implicit filtering, but provides diagnostic 'advice' based on processed data.\n- [COMMAND_EXECUTION]: The skill provides the ability to programmatically modify project-level Unreal configuration files (DefaultDeviceProfiles.ini,DefaultEngine.ini) to apply optimization settings, which is a high-capability operation performed via file I/O operations.
Audit Metadata