image-to-3d
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto communicate with the Meshy AI API (api.meshy.ai) for task creation and status polling. This is consistent with the skill's stated purpose of using the Meshy service. - [DATA_EXPOSURE]: The instructions contain a hardcoded absolute file path (
/Users/kevinbahrabadi/Blender Test/output/) used for downloading and importing assets. While this exposes the author's local system username and directory structure, it does not represent a security vulnerability for the end-user. - [COMMAND_EXECUTION]: The skill generates Python code for the Blender API (
bpy) to automate the import and selection of the generated 3D model. This is standard behavior for a Blender-integrated skill.
Audit Metadata