unreal-project-preflight
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/ue_preflight.pyusessubprocess.runto execute thecurlcommand. This is used exclusively to communicate with the local or user-defined Unreal Engine MCP server for environment probing. - [DYNAMIC_EXECUTION]: The skill uses
mcp_run_pythonto send Python scripts to the Unreal Editor via the MCP interface. These scripts are generated locally to query live project state, such as enabled plugins and console variables. User-provided input is sanitized through JSON encoding before being included in the generated scripts. - [DATA_EXPOSURE]: The skill reads project-specific configuration files including
.uproject(JSON) and.inifiles. On Windows, it also queries the system registry to locate the Unreal Engine installation directory. These actions are within the expected scope of a project preflight tool. - [SAFE]: All operations are focused on local project maintenance and configuration. The skill includes safety features such as creating backups of modified files and refusing to apply changes while the editor is running unless explicitly overridden by the user.
Audit Metadata