skills/openaec-foundation/blender-bonsai-ifcopenshell-sverchok-claude-skill-package/blender-impl-operators/Gen Agent Trust Hub
blender-impl-operators
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides patterns for executing Blender operations (bpy.ops) and scheduling background tasks using the bpy.app.timers and wm.event_timer_add APIs. These are standard Blender development patterns used for UI responsiveness and deferred execution.
- [DATA_EXFILTRATION]: Provides templates for filesystem interactions (reading and writing) through Blender's standard ImportHelper and ExportHelper mixins. These utilities interact with the filesystem based on user input via a file browser dialog.
- [INDIRECT_PROMPT_INJECTION]: Example 2 (DATA_OT_import_json) demonstrates ingesting external JSON files to generate scene objects, representing a typical attack surface for data processing.
- Ingestion points: User-selected file paths in the filepath property of the import operator.
- Boundary markers: None; data is parsed directly from JSON into vertex coordinates.
- Capability inventory: The template allows creating and linking new mesh data and scene objects via bpy.data.
- Sanitization: Includes basic JSON decoding error handling but does not perform range validation on coordinate data.
- [SAFE]: The content is educational and instructional, focusing on preventing common development pitfalls like thread-safety violations (AP-04) and memory leaks from unremoved timers (AP-01). All external references target official Blender documentation.
Audit Metadata