blender-core

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/run_in_blender.py utilizes subprocess.run to launch the Blender executable. This allows the agent to perform headless operations, such as rendering or file processing. The implementation uses a list of arguments, which prevents common shell injection vulnerabilities.
  • [DYNAMIC_EXECUTION]: The skill is designed to execute Python scripts within Blender's embedded environment using the bpy module. This is the primary intended function for automating 3D workflows and does not represent an unintended security risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 09:51 PM