blender-3d-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill focuses exclusively on procedural 3D modeling using the official Blender Python API (bpy) and bmesh modules.
- [COMMAND_EXECUTION]: The skill instructions include standard methods for executing scripts via the Blender command-line interface (e.g.,
blender --background --python script.py). This is the intended operation for headless automation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process natural language requests (e.g., 'Generate a spiral staircase') to produce executable Python code. This represents a typical attack surface for indirect prompt injection, though the provided templates do not exhibit vulnerabilities beyond this inherent risk.
- Ingestion points: User modeling requests defined in Example 1 and Example 2.
- Boundary markers: None present in the provided templates.
- Capability inventory: Mesh creation, modifier manipulation, and file system write access via
bpy.ops.wm.save_as_mainfile. - Sanitization: No explicit sanitization or input validation logic is present in the examples.
Audit Metadata