blender-render-and-export
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Blender Python API (bpy) to execute rendering and export tasks in background processes. This functionality is intended and mediated by scripts that wrap standard Blender operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs that could be used to influence agent behavior through data ingestion.\n
- Ingestion points: The
output_path,camera_name, andobject_namesvariables inscripts/render_or_export.pyand command-line arguments inscripts/inspect_roundtrip.py.\n - Boundary markers: The scripts do not use explicit delimiters to separate user-supplied strings from the rest of the prompt context.\n
- Capability inventory: The skill can create directories and write files to the local system using
pathlibandbpy.ops.\n - Sanitization: The
_owned_outputfunction enforces absolute paths, restricts file extensions to specific formats (e.g., .png, .glb, .usd), and prevents overwriting existing files.
Audit Metadata