blitz3d-decomp

This is an animation-data converter with no evident malware behavior, network activity, or credential access. Untrusted model JSON can inject or corrupt generated Luau through sequence names, node names, or `root.anim.fps`; the risk arises if the generated file is later executed. It also overwrites the caller-selected destination path. Severity is moderate for workflows that process untrusted models and execute the output; no external domains, URLs, IPs, or credentials are involved.