blender-controlnet-passes
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/setup_controlnet_passes.pyincludes functionality to encode rendered sequences into MP4 video files using theffmpegsystem utility. This execution is performed usingsubprocess.runwith a structured list of arguments, which is the recommended security practice for preventing command injection. - [SAFE]: The skill utilizes standard, well-known libraries for its operations, specifically
numpyfor pixel data handling andOpenEXRfor high-dynamic-range image processing. The technical notes and scripts demonstrate a high level of domain expertise and address specific Blender 5.x API changes and production edge cases (e.g., depth normalization, multi-part EXR layers). - [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined inputs for parameters like shot names and output directories to construct file paths and directory structures. The surface area for path traversal or schema confusion is minimal as the script operates within the context of a local 3D project workspace and uses standard library path joins.
Audit Metadata