unity-game-3d-modeling

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow involves interacting with generative 3D model providers and DCC MCP tools where an outsider could potentially supply untrusted model data, but the agent's required workflow involves active search, generation requests, and user-approved local tool operations rather than passively consuming a monitored outsider-authored feed.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates as a Unity 3D modeling and asset-creation assistant. It mentions paid generation tasks and external generative vendors (SKILL.md:14, 22, 38), but these routes are gated by mandatory user approval ("向用户说明供应商、成本、上传数据、许可和预计格式并取得批准后，才可提交异步生成任务", "任何供应商调用、图片上传和付费生成都必须逐任务取得用户确认"). Therefore, this qualifies as a direct financial/paid operation with independent/external human user approval control.