blender-mcp-skills
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python orchestration scripts (
build_extension.py,validate_extension.py) that utilizesubprocess.runto invoke the Blender executable for extension validation and package building. These operations are core to the development workflow and use structured argument lists to ensure safe execution of local binaries. - [REMOTE_CODE_EXECUTION]: The
auto_load.pytemplate script uses dynamic module importing throughimportlib.import_moduleto discover and register Blender classes. This is a standard design pattern in Blender add-on development used to automate class registration and is restricted to the local project structure. - [EXTERNAL_DOWNLOADS]: The skill provides links to official setup documentation for the Blender MCP server hosted on the author's GitHub repository (
psiQAQ/blender_mcp-setup-guide). This reference is used solely for initial configuration guidance.
Audit Metadata