The Agent Skills Directory

[DYNAMIC_EXECUTION]: The set_driver tool allows the agent to create or update Blender drivers using Python-based expressions. While this is a standard and necessary feature for rigging in Blender, it involves the evaluation of dynamic code within the host application.
[INDIRECT_PROMPT_INJECTION]: The set_driver tool accepts arbitrary strings for the expression and variables parameters. If the agent processes untrusted data (such as object names or comments from a downloaded scene) and interpolates them into these fields, it could lead to the execution of unintended logic within the Blender environment.
Ingestion points: The expression and variables input fields in the set_driver tool define the injection surface.
Boundary markers: There are no explicit delimiters or instructions in the tool schema to prevent the agent from obeying instructions embedded within the data used to construct the expression.
Capability inventory: The skill has the ability to modify scene data, including armatures, constraints, and drivers. It also has access to Bash and Read tools as per the skill metadata.
Sanitization: The skill does not implement validation or sanitization for the driver expressions, relying on the agent's logic to ensure the expressions are safe.

blender-rigging