blender-animation-rigging
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
execute_blender_codetool to run Python commands within a Blender session, which is the intended method for automating animation and rigging tasks. - [DYNAMIC_EXECUTION]: The skill instructs the agent to generate and execute Python scripts for complex tasks such as armature creation and driver setup, utilizing standard Blender API patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it reads data from the Blender scene and API documentation to inform its code generation.
- Ingestion points: Untrusted data enters the context through scene summaries (
get_objects_summary) and search results (search_api_docs) inSKILL.md. - Boundary markers: No specific delimiters or warnings are provided to prevent the agent from following instructions potentially embedded in scene data.
- Capability inventory: The skill utilizes
execute_blender_codefor live session mutation, along with various UI manipulation and rendering tools across all documentation files. - Sanitization: The skill lacks explicit sanitization steps for scene-derived data before it is interpolated into Python scripts.
Audit Metadata