registry / unity-open-mcp / 0.6.1

unity-open-mcp@0.6.1

MCP server (stdio) routing tool calls to the live Unity Open MCP Bridge or batch Unity processes.

AI Security Review

scanned 19h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package offers an explicit MCP tool that can create project-local agent skill files. It also exposes user-invoked Unity Hub and Unity batch-process controls; no install-time or covert attack chain is established.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

An MCP client invokes unity_open_mcp_generate_skill with write=true, or calls Hub/batch Unity tools.

Impact

Can alter selected project-local AI-agent instruction surfaces or launch/configure Unity tooling at caller request.

Mechanism

Explicit project-local agent-skill generation and Unity control tooling.

Rationale

Source inspection found an explicit first-party agent-extension setup capability, not malicious autonomous behavior. Per policy this is a warn-level lifecycle risk because it can mutate AI-agent instruction surfaces when invoked.

Evidence

package.jsondist/index.jsdist/tool-router.jsdist/skill/generate-skill.jsdist/skill/client-paths.jsdist/hub-control.js<projectRoot>/.claude/skills/unity-open-mcp/SKILL.md<projectRoot>/.cursor/skills/unity-open-mcp/SKILL.md<projectRoot>/.opencode/skills/unity-open-mcp/SKILL.md<projectRoot>/.agents/skills/unity-open-mcp/SKILL.md

Network endpoints2

unity-open-mcp@0.6.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code