blender-extensions
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard Blender extension management functionality using vendor-provided libraries
dcc_mcp_coreanddcc_mcp_blender.- [SAFE]: Actions such as modifying user preferences and performing addon installations are consistent with the skill's primary purpose and metadata.- [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by processing external package archives. - Ingestion points: The
packageobject containingarchive_pathinscripts/plan_extension_install.pyandscripts/install_extension.py. - Boundary markers: Not explicitly defined in the wrapper scripts; functionality is delegated to the
dcc_mcp_blenderlibrary. - Capability inventory: Filesystem modifications for addon installation and modification of user preferences as declared in
SKILL.md. - Sanitization: The
tools.yamlschema includes asha256field for checksum verification, which allows for integrity checking of the downloaded packages before installation.
Audit Metadata