blender-materials
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements material management using the standard Blender API (
bpy). Operations such asbpy.data.materials.new(),bpy.data.materials.remove(), and modifyingPrincipled BSDFnode inputs are legitimate and restricted to the application's internal data structures. - [SAFE]: The skill imports internal modules
dcc_mcp_coreanddcc_mcp_blender. These are recognized as legitimate resources belonging to the skill's author, 'dcc-mcp'. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as material names and property values which could theoretically contain embedded instructions.
- Ingestion points: Material names in
create_material.py,delete_material.py, andset_material_color.py; PBR property values increate_material.pyandset_material_color.py. - Boundary markers: No specific delimiters or safety instructions are used when interpolating these values into the Blender context.
- Capability inventory: The skill is capable of modifying and deleting scene materials but does not have access to the file system (beyond the specified
Readtool), network, or shell execution. - Sanitization: Inputs are treated as literal values for Blender properties; while not explicitly sanitized, they do not flow into dangerous execution sinks.
Audit Metadata