blender-core
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/run_in_blender.pyutilizessubprocess.runto launch the Blender executable. This allows the agent to perform headless operations, such as rendering or file processing. The implementation uses a list of arguments, which prevents common shell injection vulnerabilities. - [DYNAMIC_EXECUTION]: The skill is designed to execute Python scripts within Blender's embedded environment using the
bpymodule. This is the primary intended function for automating 3D workflows and does not represent an unintended security risk in this context.
Audit Metadata