blender-geometry-nodes
Fail
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONMETADATA_POISONINGCOMMAND_EXECUTIONDYNAMIC_EXECUTIONOBFUSCATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Multiple reference files (ADVANCED_NODE_TREES.md, NODE_TREE_OPTIMIZATION.md, and PROCEDURAL_MODELING.md) provide Python snippets that use the
requestslibrary to send dynamically generated code to a remote URL for execution.\n - Evidence: Snippets use
requests.post(url, json={"code": code})whereurlis an undefined variable, suggesting a staged or configurable remote execution endpoint.\n- [DATA_EXFILTRATION]: The instruction to send locally generated code to a remote URL via raw HTTP POST requests constitutes a significant data exfiltration risk, as workspace context or generated scripts are transmitted to an external server.\n- [METADATA_POISONING]: The version history in SKILL.md (v2.0.0) deceptively claims that legacy HTTP bridge patterns andrequestswrappers were removed, whereas they remain central to the provided code in the advanced reference documentation.\n- [COMMAND_EXECUTION]: TheMulti-Lane Scatter Systemin SKILL.md usesraise SystemExit, which can terminate the agent's Python interpreter and cause a denial of service if the environment does not match expectations.\n- [DYNAMIC_EXECUTION]: The skill assembles executable Python strings at runtime and instructs the agent to execute them via a remote network bridge instead of using the claimed Blender MCP toolset.\n- [OBFUSCATION]: The skill uses cryptic "obs 64" and "observation 64" markers in its version history and troubleshooting sections, and relies on an undefined global variableurlfor its primary network operations, which may be part of a staged configuration or activation mechanism.
Recommendations
- AI detected serious security threats
Audit Metadata