inspect-blender-rigs-motion
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external
.blendfiles and motion capture libraries, which serve as untrusted data ingestion points. The skill acknowledges this risk and provides explicit security guardrails. - Ingestion points: External
.blendfiles and mocap libraries referenced in SKILL.md. - Boundary markers: Present; the skill instructs using
blender --backgroundwith auto-execution disabled. - Capability inventory:
execute_command(blender CLI),write_file,read_file,edit_file, andcreate_file(SKILL.md). - Sanitization: Present; instructions mandate disabling embedded driver evaluation and script auto-execution for downloaded assets.
- [COMMAND_EXECUTION]: The skill utilizes the
blendercommand-line interface to execute local Python scripts for rig diagnostics. This is a core functional requirement and is documented with appropriate security precautions.
Audit Metadata