reference-to-3d
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted external data in the form of reference images and texture atlases provided by the user.
- Ingestion points: Image files are read by
scripts/template_analyzer.pyandscripts/silhouette_validator.pyusing the OpenCV library. - Boundary markers: No explicit boundary markers or instructions are provided to the agent to ignore potentially malicious metadata or steganographically embedded instructions within the source images.
- Capability inventory: The skill utilizes
Bashto run local Python analysis scripts and themcp__blender__execute_blender_codetool to manipulate the 3D environment. - Sanitization: No sanitization of image metadata is performed; the skill relies on standard image decoding via
cv2.imread. - [COMMAND_EXECUTION]: The instructions direct the agent to execute local Python scripts (
template_analyzer.pyandsilhouette_validator.py) using theBashtool to perform component extraction and mask validation. - [DYNAMIC_EXECUTION]: The skill generates and executes Blender Python code at runtime to build 3D geometry from extracted image contours, which is the primary intended function of the skill.
Audit Metadata