blender-mcp
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
blendercommand-line interface in background mode to perform scene exports, which is a recommended practice to avoid MCP server timeouts during long-running operations. - [EXTERNAL_DOWNLOADS]: The instructions recommend the use of
@gltf-transform/clifor optimizing 3D models. This package is managed by the official npm registry, which is a well-known and trusted service in the development ecosystem. - [DYNAMIC_EXECUTION]: Programmatic control of Blender is achieved through the
execute_pythontool and theblender --python-exprflag. These patterns are central to the skill's primary purpose and are implemented using standard Python and Blender API conventions. - [INDIRECT_PROMPT_INJECTION]: The skill extracts metadata from Blender scenes, such as object names, material properties, and animation track data. While these represent ingestion points for potentially untrusted data, the risk is assessed as low due to the use of standard formatting and the constraint of the execution environment.
- Ingestion points: Scene hierarchy data, material node configurations, and animation track metadata extracted via the Blender API.
- Boundary markers: Not explicitly implemented in the example script templates.
- Capability inventory: Python API access within Blender, CLI execution for export tasks, and use of
npxfor external optimization tools. - Sanitization: Example scripts utilize
json.dumps()to ensure that extracted scene data is properly escaped before being presented to the agent.
Audit Metadata