blender-mesh-authoring
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured Python scripts and Markdown recipes for Blender mesh authoring. All operations use standard Blender Python (bpy) APIs without any network or unauthorized file system access.
- [INDIRECT_PROMPT_INJECTION]: The skill processes Blender scene data such as object names and mesh attributes in
scripts/audit_mesh.py. This constitutes an ingestion point for untrusted scene data. However, the risk is mitigated as the script uses structured JSON output (json.dumps) and direct API lookups (bpy.data.objects.get), which prevents data from being executed as code or causing schema confusion. The skill also enforces a strict authoring contract requiring validation of all inputs before mutation.
Audit Metadata