scenario-zbrush-automation

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to call system utilities like screencapture and osascript. These calls are implemented to diagnose application hangs and monitor ZBrush UI state, which are common requirements for robust automation in 3D pipelines.
  • [DYNAMIC_EXECUTION]: The automation scripts utilize importlib.import_module and getattr to dynamically load and call functions within the bridge environment. It also constructs Python strings to be executed within ZBrush's internal interpreter, facilitating direct control over the software's API.
  • [PRIVILEGE_ESCALATION]: The skill interacts with macOS 'System Events' via AppleScript, which requires the user to grant Accessibility permissions. This is explicitly documented as necessary to detect and dismiss modal dialogs that would otherwise block unattended batch processing.
  • [PERSISTENCE]: The skill provides functions to write ZScript macros into ZBrush's startup directories (ZStartup/Macros). This allows for persistent helper buttons within the ZBrush interface, but the persistence is limited to the ZBrush application environment rather than the broader operating system.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 10:51 PM