blender-controlnet-passes

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/setup_controlnet_passes.py includes functionality to encode rendered sequences into MP4 video files using the ffmpeg system utility. This execution is performed using subprocess.run with a structured list of arguments, which is the recommended security practice for preventing command injection.
  • [SAFE]: The skill utilizes standard, well-known libraries for its operations, specifically numpy for pixel data handling and OpenEXR for high-dynamic-range image processing. The technical notes and scripts demonstrate a high level of domain expertise and address specific Blender 5.x API changes and production edge cases (e.g., depth normalization, multi-part EXR layers).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined inputs for parameters like shot names and output directories to construct file paths and directory structures. The surface area for path traversal or schema confusion is minimal as the script operates within the context of a local 3D project workspace and uses standard library path joins.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 11:37 AM