blender-threejs-export

This module is a local exporter/viewer generator that implements a high-impact 'execute_code' socket RPC to a Blender service and uses user-controlled values to construct both the export filepath and the generated HTML. There is no clear evidence of overt malware (no exfiltration/credential theft shown), but the design is security-sensitive: a compromised/malicious Blender service or untrusted CLI inputs could lead to arbitrary code execution in the Blender context and potential HTML/JS injection in the produced viewer artifact. Treat as a trusted-tool-only component and add strict validation/escaping and a safer RPC protocol if used in untrusted environments.