dayz-animation-pipeline

Warn

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: Several scripts (build_viewer.py, weapon_grip_viewer.py, and seanim_export.py) implement dynamic loading of local modules from computed paths.
  • build_viewer.py and weapon_grip_viewer.py use a function _load_viewer_core that walks up the directory tree to find viewer_core.py. It uses ast.parse to verify the module's constants and function signatures before executing it via importlib.util.spec_from_file_location and spec.loader.exec_module.
  • seanim_export.py dynamically searches for seanim_writer.py in multiple potential locations (including a project-specific path), adds the found directory to sys.path, and performs a dynamic import.
  • [COMMAND_EXECUTION]: The script scripts/install_py3d.py uses subprocess.run to invoke the pip module (sys.executable -m pip install) to install a local wheel file. It also attempts to uninstall conflicting versions of the same package name if they do not match the expected fork identity.
  • [EXTERNAL_DOWNLOADS]: The skill's installation process (SKILL.md) involves installing a vendored Python wheel package (py3d_dayz) using the provided installation script.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 28, 2026, 05:05 AM