blender-portable-scene
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes vendor-specific libraries from the author dcc-mcp (dcc_mcp_core and dcc_mcp_blender). These imports represent standard internal functionality for the platform.- [INDIRECT_PROMPT_INJECTION]: The skill processes external Blender scene files (.blend), which constitutes a data ingestion surface. However, the skill implements several security boundaries.
- Ingestion points: The tool accepts a filepath to a Blender scene file.
- Boundary markers: The skill description explicitly specifies the rejection of complex or risky scene components such as scripts, object drivers, and external libraries.
- Capability inventory: The script performs file-write operations to save the audited scene copy.
- Sanitization: The tool performs path-string scans, temporarily clears file-browser metadata, and enforces path restrictions (rejecting symlinks/reparse points) to ensure the output is self-contained and sanitized.
Audit Metadata