unreal-project-preflight

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/ue_preflight.py uses subprocess.run to execute the curl command. This is used exclusively to communicate with the local or user-defined Unreal Engine MCP server for environment probing.
  • [DYNAMIC_EXECUTION]: The skill uses mcp_run_python to send Python scripts to the Unreal Editor via the MCP interface. These scripts are generated locally to query live project state, such as enabled plugins and console variables. User-provided input is sanitized through JSON encoding before being included in the generated scripts.
  • [DATA_EXPOSURE]: The skill reads project-specific configuration files including .uproject (JSON) and .ini files. On Windows, it also queries the system registry to locate the Unreal Engine installation directory. These actions are within the expected scope of a project preflight tool.
  • [SAFE]: All operations are focused on local project maintenance and configuration. The skill includes safety features such as creating backups of modified files and refusing to apply changes while the editor is running unless explicitly overridden by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 07:18 AM