blender-cli
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/run_blender.pylaunches the Blender executable usingsubprocess.Popen. This is the core functionality of the skill and is implemented following security best practices. The command includes flags like--backgroundfor headless operation,--factory-startupto ignore local user configurations, and--disable-autoexecto block the execution of potentially malicious Python scripts or drivers embedded in user-supplied .blend files. - [SAFE]: The skill includes a robust validation mechanism in
scripts/evidence.pythat uses theastmodule to perform static analysis on any Python scripts generated by the agent. This mechanism ensures that the code only uses supported Blender APIs and is strictly bound to specific 'evidence' passages read from the bundled API corpus, providing a high level of traceability and preventing the execution of unverified or hallucinated commands.
Audit Metadata