blender-facial-shapekeys

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Blender's internal API (bpy.ops) to perform standard mesh and shape key operations such as shape_key_add, shape_key_mirror, and save_as_mainfile. These are well-defined, legitimate uses within a Blender modeling workflow.
  • [DYNAMIC_EXECUTION]: While the skill mentions Blender's SCRIPTED driver expressions in its documentation, it does not dynamically generate or execute arbitrary Python code from untrusted external sources. The scripts/shapekeys.py script uses standard mathematical libraries like numpy to manipulate vertex data for shape keys locally.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any network operations or external downloads. All operations are local to the Blender environment.
  • [DATA_EXFILTRATION]: There is no evidence of sensitive data access or exfiltration. The script's report functionality only calculates vertex offsets to identify unsculpted shape keys.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 09:37 PM