script-blender-automation

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses tools like Bash, Write, and Edit to create and manage Blender Python scripts. It utilizes the bpy API for automating 3D workflows, which is consistent with the stated purpose of the skill.
  • [PROMPT_INJECTION]: The skill provides functions to ingest external data from CSV and JSON files (create_from_csv, create_from_json) to drive scene generation. While this represents a surface for indirect prompt injection, the examples provided demonstrate legitimate data-driven modeling functionality without malicious intent.
  • [SAFE]: No malicious behavior, obfuscation, data exfiltration, or persistence mechanisms were detected. The skill follows standard practices for Blender add-on development and scripting.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 09:24 PM
Security Audit — agent-trust-hub — script-blender-automation