texture-uv-material-workflow
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied 3D scene data and generates JSON reports for agent consumption.
- Ingestion points: The
scripts/audit_material_uv.pyscript reads metadata such as object names, material names, and file paths directly from the active Blender scene. - Boundary markers: The script output is raw JSON and lacks boundary markers to instruct the agent to ignore potentially malicious instructions embedded in scene data.
- Capability inventory: The skill utilizes
blender-python-executionfor script execution, providing access to the local filesystem and Blender API. - Sanitization: No sanitization is performed on strings derived from the Blender scene before they are included in the JSON audit report.
- [DYNAMIC_EXECUTION]: The workflow relies on generating and executing Python code at runtime. The documentation in
SKILL.mddescribes a pattern for dynamically assembling the audit script by prepending configuration variables before execution. Additionally,references/bpy-recipes.mdprovides code templates intended for dynamic instantiation and execution via the Blender Python environment. - [EXTERNAL_DOWNLOADS]: The instructions recommend using an external bootstrap skill to download and install additional skills such as
blender-uv-texturing, which introduces a dependency on external repositories for extended functionality.
Audit Metadata