scenario-blender-grease-pencil
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests metadata and geometry data from the active Blender scene (such as object and layer names) to generate reports and manage drawings. This represents a potential surface for indirect prompt injection if the Blender project file originates from an untrusted source.
- Ingestion points:
bx_gp.pyreads object, layer, and material metadata frombpy.context.scenein functions likereport()anddrawing_stats(). - Boundary markers: No explicit boundary markers or 'ignore' instructions are used when processing scene data.
- Capability inventory: The skill can write files to the local system (
render_frame,render_strip,onion) and execute Blender operators (edit_op,gui_trim). - Sanitization: Scene-derived strings are not explicitly sanitized before being used in output reports or as identifiers.
- [DYNAMIC_EXECUTION]: The skill dynamically modifies the Python path to import peer scripts and uses dynamic attribute access to invoke Blender operators.
- Evidence:
bx_gp.pyappends a sibling directory (scenario-blender-expert/scripts) tosys.pathto load dependencies from the same author. - Evidence: The
edit_opfunction inbx_gp.pyusesgetattrto dynamically call operators within thebpy.opsnamespace based on string arguments.
Audit Metadata