ue5-module-router
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The routing policy references platform tools like
run_console_commandandexecute_script. These tools are intended for Unreal Engine development workflows, and the skill contains instructions prioritizing the use of more restrictive, purpose-built tools to maintain a posture of least privilege. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts to extract module names for routing. This represents an ingestion point for untrusted data, although the risk is managed by deterministic logic and specific tool constraints described in the routing policy.
- Ingestion points: User prompts are parsed for module names.
- Boundary markers: None explicitly defined in the workflow.
- Capability inventory: The skill guides the use of console commands, script execution, and actor manipulation tools.
- Sanitization: None explicitly defined, relying on platform-level tool safety.
Audit Metadata