scenario-maya-deformation
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/mx_skin.pyusesimportlib.import_module()to dynamically load Maya-specific plugin modules. This is a standard discovery mechanism used to ensure compatibility with various versions of Maya and the ngSkinTools/Skin Tools plugins. The modules targeted are restricted to specific, known software names. - [INDIRECT_PROMPT_INJECTION]: The skill exposes an ingestion surface by reading and processing external JSON files for skin weight data. While this involves untrusted data, the processing is strictly programmatic (numerical Maya scene updates) and includes format validation, posing no risk to the agent's control flow or safety guardrails.
- [COMMAND_EXECUTION]: The documentation includes instructions for using
npxto install additional skills. The suggested repository belongs to the skill's author (scenario-labs), representing a standard and legitimate dependency management practice within the developer's ecosystem.
Audit Metadata