blender-geometry-nodes
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of Blender in background mode using provided Python scripts to build node trees and inspect node properties. These operations are standard for automation in 3D workflows.- [DYNAMIC_EXECUTION]: The
gn_builder.pyscript usessetattrandgetattrto dynamically map JSON properties to Blender's RNA API. This is a functional requirement for a generic node-tree builder and is constrained to the Blender environment.- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data in the form of JSON specifications and modifier input strings.\n - Ingestion points: Node tree specifications are read from JSON files or directly as dictionaries; modifier values are passed via CLI arguments.\n
- Boundary markers: The skill uses standard CLI argument parsing and the
--separator to distinguish between Blender arguments and script arguments.\n - Capability inventory: The toolset can create node groups, manipulate scene objects, and save project files to disk using
bpy.ops.wm.save_as_mainfile.\n - Sanitization: Basic type validation and conversion (int, float, bool, tuple) are performed on input values before they are applied to object properties.
Audit Metadata