uloop-find-game-objects
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of the
uloopcommand-line tool. This utility is provided by the author ('hatayama') to enable programmatic interaction with the Unity Editor or project files.\n- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes names, paths, and component data from Unity scenes which could contain malicious instructions.\n - Ingestion points: GameObject names, tags, and hierarchy paths retrieved from the Unity environment (SKILL.md).\n
- Boundary markers: No explicit boundary markers or warnings to disregard instructions within the data are defined.\n
- Capability inventory: Execution of the
uloopCLI tool and local file writing of results to.uloop/outputs/FindGameObjectsResults/(SKILL.md).\n - Sanitization: No sanitization or filtering logic is described in the skill metadata for the ingested strings.
Audit Metadata