blender-attributes

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard CRUD (Create, Read, Update, Delete) operations for Blender object metadata (custom properties). The functionality is well-defined and scoped to object attribute management within a Blender session.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided input for object names, attribute names, and property values. While this data is passed to the Blender environment, the risk is minimized as these are treated as data values for internal Blender ID properties. The skill includes standard schema validation for inputs.
  • [DYNAMIC_EXECUTION]: The Python scripts (e.g., set_attribute.py, list_attributes.py) function as entry points that delegate logic to the dcc_mcp_blender library. No dynamic code generation, eval(), or exec() calls were detected in the skill's source files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 03:25 PM