blender-texturing
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Blender-specific commands through the
bpyandbmeshAPIs to automate material authoring and decal placement. This is the primary function of the skill and occurs locally within the Blender environment.\n- [EXTERNAL_DOWNLOADS]: The skill usesbpy.data.images.load()to fetch texture files (e.g., curvature maps, AO maps, decal images) from the local filesystem. While these are 'external' to the Blender process, they are standard local file operations based on user-provided or relative paths (e.g.,//tex/T_Crate_CURV.png).\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection via texture image files and mesh metadata. Ingestion points include image paths and object names inscripts/decal.pyandscripts/smart_material.py. Boundary markers are absent. Capability inventory includes file loading (bpy.data.images.load), mesh manipulation, shader node wiring, and file saving (bpy.ops.wm.save_as_mainfile). Sanitization is performed via standard path resolution usingbpy.path.abspath. There is no evidence of these inputs being able to influence agent instructions or execute arbitrary code.
Audit Metadata