blender-materials

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements material management using the standard Blender API (bpy). Operations such as bpy.data.materials.new(), bpy.data.materials.remove(), and modifying Principled BSDF node inputs are legitimate and restricted to the application's internal data structures.
  • [SAFE]: The skill imports internal modules dcc_mcp_core and dcc_mcp_blender. These are recognized as legitimate resources belonging to the skill's author, 'dcc-mcp'.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as material names and property values which could theoretically contain embedded instructions.
  • Ingestion points: Material names in create_material.py, delete_material.py, and set_material_color.py; PBR property values in create_material.py and set_material_color.py.
  • Boundary markers: No specific delimiters or safety instructions are used when interpolating these values into the Blender context.
  • Capability inventory: The skill is capable of modifying and deleting scene materials but does not have access to the file system (beyond the specified Read tool), network, or shell execution.
  • Sanitization: Inputs are treated as literal values for Blender properties; while not explicitly sanitized, they do not flow into dangerous execution sinks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 03:25 PM