Blender Animation

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill is coherent for rendering Blender animations, but users should notice that it runs local shell commands and generated Blender Python code.

This looks safe for its stated purpose if you are comfortable running Blender locally. Use a sandbox or low-privilege environment, review generated Python when working with sensitive files, and verify that the Blender binary on PATH is trusted.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can use a local shell for this skill, so an unexpected command would have local environment impact even though the documented workflow is Blender-only.

Why it was flagged

The skill exposes a broad shell tool, though SKILL.md narrows the intended use to running the Blender helper script for rendering.

Skill content
"tools": ["bash"]
Recommendation

Approve or monitor shell use and keep it limited to the expected Blender runner command and /tmp task files.

What this means

A generated Blender Python script could affect the local runtime if it contains unsafe Python, even though the skill instructs it to perform only scene creation and rendering.

Why it was flagged

The helper executes a Python script inside Blender. This is central to the skill's purpose and disclosed, but it is still generated local code execution.

Skill content
blender -b -P $SCRIPT_PATH --render-output /tmp/output --render-format FFMPEG --render-anim
Recommendation

Run it in a sandboxed or low-privilege environment, review generated scripts for sensitive use cases, and keep file and network access limited.

What this means

The skill may fail or may use whichever Blender executable is available on PATH.

Why it was flagged

The helper depends on a local Blender binary, while the registry requirements declare no required binaries or install spec.

Skill content
blender -b -P $SCRIPT_PATH
Recommendation

Install Blender from a trusted source and consider declaring the required blender binary and expected version.