blender-vse
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto send Python code to a local listener onlocalhost:5656. This is a standard communication pattern for interacting with a running Blender process.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided descriptions of video editing tasks to generate Blender Python code.\n - Ingestion points: User requests describing video edits (e.g., subtitles, transitions) as described in
SKILL.md.\n - Boundary markers: Not present in the provided templates.\n
- Capability inventory: File system access (reading/writing media files) and local network communication via
curl.\n - Sanitization: None identified in the skill instructions.\n- [DYNAMIC_EXECUTION]: The skill involves generating Python scripts at runtime to perform video editing operations in Blender. This is the primary intended function of the skill.
Audit Metadata