scenario-zbrush-retopology-export

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/zb_retopology_export.py employs importlib.import_module() to load sibling modules within the scenario-labs toolkit. These imports are constrained to the local skill environment and facilitate communication between the retopology tools and the base ZBrush expert skill.
  • [COMMAND_EXECUTION]: The skill automates ZBrush workflows by executing Python and ZScript commands through an agent-to-application bridge (zl.run, rx.zcall). This is a core feature of the toolkit for performing automated sculpt processing and is consistent with its intended expert use.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external 3D mesh files (OBJ and GLB) for triage and quality auditing. While these files are an ingestion surface, the skill only extracts geometric properties and header information, posing no risk of instruction override via the processed data.
  • [SAFE]: The skill is well-documented and includes extensive references to expert instructional material (YouTube tutorials) for ZBrush practitioners. These resources are purely informative and do not involve remote code execution or automated exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 10:52 PM