blender-rendering
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data via CLI arguments to specify output paths and configuration for rendering tasks.
- Ingestion points: Arguments such as
--outand--saveprocessed inscripts/render_batch.pyandscripts/_bpyx.py. - Boundary markers: No explicit delimiters or "ignore embedded instructions" warnings are present for these inputs.
- Capability inventory:
scripts/render_batch.py: Usesos.makedirsto create directories andbpy.ops.render.renderto write image or video files to the filesystem.scripts/_bpyx.py: Usesbpy.ops.wm.save_as_mainfileto save Blender project files to user-specified paths.- Sanitization: Input is parsed using standard
argparsetypes, but there is no explicit validation or restriction on the target file paths.
Audit Metadata