blender-geometry-nodes

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Anomaly
AnomalyLOW
reference/PROCEDURAL_MODELING.md

No direct malware behaviors are evident inside the shown Blender Geometry Nodes construction logic (no exec/eval, subprocess, credential/file access, or network calls are present in the displayed node-building code). However, the fragment repeatedly transmits executable Blender Python source over HTTP to a caller-specified `url`, with an implied remote execution mechanism. This creates a significant supply-chain/trust-boundary risk: if the endpoint/tooling is not strictly authenticated/allowlisted and verified, the payload path can become an RCE vector. Treat this as a medium-to-high security risk design pattern driven by remote code delivery rather than confirmed malicious content in the node logic itself.

Confidence: 60%Severity: 68%
Audit Metadata
Analyzed At
Oct 13, 2026, 11:30 AM
Package URL
pkg:socket/skills-sh/sideshowroberto%2Fvfx-agent-toolkit%2Fblender-geometry-nodes%2F@00550fea1f0d7b0b2bc3db3382cbf067941264e2b8a79a603580182024fca74e