blender-import-to-scene
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a standard asset import workflow for Blender using the vendor's established dcc-mcp-core and dcc-mcp-blender libraries.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data. 1. Ingestion points: descriptor parameter in scripts/import_to_scene.py. 2. Boundary markers: No explicit prompt boundary markers, but structural validation is performed. 3. Capability inventory: File reading and scene manipulation via bpy. 4. Sanitization: Calls desc.validate() for structural integrity. The risk is minimized by the use of standard DCC import pipelines.
Audit Metadata