babylon-3d-generator
Warn
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The Python script
scripts/babylon_3d_asset.pyperforms dynamic code loading by modifying the system path (sys.path) at runtime to include a relative directory (../../threejs-3d-generator/scripts) and importing themainfunction from a module outside its own directory structure. - [COMMAND_EXECUTION]: The skill instructions direct the agent to execute a shell script for credential probing (
probe_asset_credentials.sh) which is stored in a separate, external skill directory (babylon-game-director-skill-dir). - [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute the Python tool script
scripts/babylon_3d_asset.pyto generate 3D assets via the Tripo API.
Audit Metadata