asset-transformer-toolkit
Warn
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of agent-generated C# code within a live Unity Editor session. As documented in the
SECURITY.mdfile, this is accomplished using theunity command evalshell command. - [DYNAMIC_EXECUTION]: The skill provides instructions and code templates in
references/rulesets-and-actions.mdthat allow the agent to dynamically construct and execute C# scripts to modify RuleSet assets at runtime. - [DATA_EXFILTRATION]: The
ATTAssistantUtilities.CreateImporterandATTAssistantUtilities.CanImportFilefunctions documented inreferences/create-importer.mdaccept absolute system paths for thefilePathparameter. This capability allows the agent to interact with and verify the existence of files anywhere on the local file system. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of 3D models and point clouds, creating a surface for indirect prompt injection.
- Ingestion points: Files are imported from absolute paths in
references/create-importer.mdand processed by the toolkit. - Boundary markers: No specific delimiters or safety warnings are implemented to prevent the agent from acting on instructions potentially embedded in file metadata or property fields.
- Capability inventory: The skill has access to shell execution via
unity command evaland the ability to modify project assets as described inreferences/rulesets-and-actions.md. - Sanitization: There is no evidence of sanitization or filtering for untrusted data imported during the 3D asset workflow.
Audit Metadata