blender-interactive

Warn

Audited by Socket on May 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is largely coherent for interactive Blender automation and uses mostly local/official components, but it exposes a network socket and explicitly supports arbitrary Python execution on the target host. That makes it high-impact if misused, though the provided text does not show credential theft, deceptive routing, or confirmed malware.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
May 12, 2026, 08:03 AM
Package URL
pkg:socket/skills-sh/kjaylee%2Fmisskim-skills%2Fblender-interactive%2F@5b4c93915c711cba9287a664a80091574507b369