blender-animation-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from the Mixamo website and downloaded assets, which could potentially contain malicious instructions.
- Ingestion points: The agent reads and reports animation names and metadata from Mixamo search result cards and FBX files.
- Boundary markers: Guidance in
references/astra-workflow.mdinstructs the agent to honor explicit user instructions and reason within the scene context. - Capability inventory: The skill can execute Blender Python scripts, perform file system operations in restricted directories, and utilize host browser search tools.
- Sanitization: The
scripts/import_mixamo.pyscript performs validation on file suffixes, clip name lengths, and prevents directory overwriting. - [EXTERNAL_DOWNLOADS]: The workflow involves downloading 3D animation assets (FBX) from Mixamo, which is a well-known and recognized service provided by Adobe.
- [COMMAND_EXECUTION]: The skill includes a dedicated Python script for Blender automation that is designed to be executed via the command line to process assets, following standard industry patterns.
Audit Metadata