3d-asset-generation
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves 3D assets from external generation services including Atlas Cloud and fal.ai. These are well-known services used for text-to-3D and image-to-3D workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill processes 3D meshes (GLB artifacts) sourced from external providers. This data ingestion surface could theoretically be used to deliver indirect instructions via mesh metadata or object properties.
- Ingestion points: 3D artifacts downloaded from Atlas and fal.ai (SKILL.md).
- Boundary markers: No explicit prompt boundary markers are defined for metadata processing.
- Capability inventory: The skill maintains capabilities for tool execution via
blender_world,atlas_3d, andfal_3d(SKILL.md). - Sanitization: A 'Mandatory mesh QA' section requires human-in-the-loop inspection in Blender before assets are accepted into production.
- [DYNAMIC_EXECUTION]: The skill uses the
blender_worldtool to perform programmatic assembly normalization. This involves calculating scale factors and terrain offsets at runtime based on the bounding boxes of imported external artifacts.
Audit Metadata