ue5-audio-mcp
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local TCP server on port 9877 to execute procedural commands within Unreal Engine 5.
- [COMMAND_EXECUTION]: Enables the dynamic generation and compilation of Unreal Engine Blueprint logic and MetaSound graphs using commands such as
bp_add_nodeandbp_compile. - [DATA_EXFILTRATION]: Features an
import_sound_filecommand that allows the agent to read and process files from local system paths. - [EXTERNAL_DOWNLOADS]: References the vendor's official GitHub repository
github.com/koshimazaki/UE-AUDIO-MCPfor the required plugin installation. - [PROMPT_INJECTION]: Possesses an attack surface for indirect prompt injection by processing data directly from the Unreal Editor environment.
- Ingestion points: Reads project data via
list_assets,scan_blueprint, andexport_metasoundcommands. - Boundary markers: No specific delimiters or instruction-ignore warnings are implemented for ingested data.
- Capability inventory: Includes local file system access and the ability to modify and execute Blueprint logic.
- Sanitization: Implements a strict allowlist for the
call_functiontool to prevent the execution of non-audio related Blueprint functions.
Audit Metadata