nuke-python-scripting
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as shot configurations and file paths to generate Python scripts, which creates a potential injection surface. • Ingestion points: Arguments passed to functions like setup_read_node, setup_write_node, and batch_comp_setup in SKILL.md. • Boundary markers: None are present in the templates to differentiate between data and instructions. • Capability inventory: The skill has access to Bash and Write tools, and the generated scripts utilize nuke.scriptSave to modify the file system. • Sanitization: No input validation or path sanitization is demonstrated in the provided Python templates.
- [DYNAMIC_EXECUTION]: The skill is designed to generate and facilitate the execution of Python scripts for Nuke automation. This involves the runtime assembly of executable code from templates and user-supplied strings, which is a standard but inherently risky pattern for code generation skills.
Audit Metadata