blender-audioviz
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses subprocess.run to execute the ffmpeg command-line tool for audio format conversion.
- [DYNAMIC_EXECUTION]: The skill generates and executes Python scripts within the Blender environment to manage scene setup and real-time visualization handlers.
- [PERSISTENCE]: The skill includes instructions to set the use_module property to True for Blender text blocks, which ensures that custom frame handler scripts automatically execute whenever the .blend file is opened.
- [INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface for indirect prompt injection via the processing of user-provided audio files. 1. Ingestion points: Audio files enter the system via the convert_to_wav and extract_kick functions in SKILL.md. 2. Boundary markers: None are explicitly defined for the raw audio data streams. 3. Capability inventory: The skill can execute external commands via subprocess.run and manipulate the Blender environment via the bpy API. 4. Sanitization: The skill mitigates common injection risks by using list-based arguments in its subprocess calls to handle file paths safely.
Audit Metadata