avatar-animations
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads the official Decentraland avatar rig (
Avatar_File.blend) from the vendor's GitHub repository. - [DYNAMIC_EXECUTION]: Provides Python scripts that utilize the
bpy(Blender) API to automate bone posing, action management, and asset validation at runtime within the Blender environment. - [COMMAND_EXECUTION]: Includes instructions for executing Blender in headless mode via the command-line interface to perform automated builds and exports of animation files.
- [INDIRECT_PROMPT_INJECTION]: The skill includes logic to parse and validate the internal JSON structures of exported GLB files. While this creates an ingestion point for external file data, the validation is focused on bone counts and animation metadata, presenting a negligible security risk.
Audit Metadata