← 返回 Skills 市场

Blender Animation

Name: Blender Animation
Author: vignesh8164

作者 Vignesh G · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ⚠ suspicious

158

总下载

当前安装

版本数

在 OpenClaw 中安装

/install blender-animation

功能描述

Generate and render 3D animations using Blender headless mode, including scene setup, object and camera animation, lighting, and output to MP4 video.

使用说明 (SKILL.md)

# Blender Animation Skill

## Purpose

This skill enables automated 3D animation generation using Blender in headless mode. It is designed for controlled, programmatic scene creation and rendering workflows in server or agent environments.

---

## When to use

Use this skill when:

- Generating 3D animations programmatically

- Creating motion graphics using Blender

- Rendering animation output without GUI

- Automating scene setup, lighting, and camera movement

Do NOT use this skill for:

- Arbitrary system command execution

- File system exploration outside task scope

- Network-based operations unless explicitly required

---

## Capabilities

- Scene creation using Blender Python (bpy)

- Object animation and transformations

- Camera setup and motion

- Lighting configuration

- Rendering animation to MP4 format

- Headless execution (no GUI)

---

## Execution Model

1. Generate a Blender Python script

2. Save script to:

/tmp/blender_script.py

3. Execute Blender in headless mode using:

scripts/run_blender.sh

4. Output is saved to:

/tmp/output.mp4

---

## Safety & Constraints

- Execution is limited to Blender-related operations only

- No arbitrary shell commands outside the defined script runner

- No modification of system files outside `/tmp`

- No access to sensitive directories (e.g., /etc, /home)

- Network access should not be used unless explicitly required

- Scripts must only perform scene creation and animation tasks

- Avoid large resource usage (default animation limit: 10 seconds)

---

## Sandbox Expectation

This skill is intended to run in a controlled or sandboxed environment such as:

- Containerized execution (Docker)

- Restricted agent runtime

- Limited-permission server environment

---

## Rules

- Always run Blender in headless mode

- Never open GUI

- Always generate a Python script before execution

- Keep animations under 10 seconds unless specified

- Always return output file path and logs

---

## Output

Return:

- Rendered video file (/tmp/output.mp4)

- Blender Python script used

- Execution logs

---

## Transparency Notice

This skill executes generated Python scripts within Blender.

Users should review generated scripts if operating in sensitive environments.

---

## Version

v1.0.1 — Security and safety improvements added

安全使用建议

This skill will create and run a Blender Python script you or the agent generates. That script runs inside Blender's Python environment and can perform arbitrary file and network operations — the SKILL.md's stated 'no network / no sensitive files' rules are advisory only and not enforced by the skill. Before installing or invoking: - Only run this skill in a strict sandbox (container/VM) with no access to host files, credentials, or network unless explicitly needed. - Do not run unreviewed generated Blender Python scripts. Always inspect the script saved to /tmp/blender_script.py before execution. - If you control the environment, modify scripts/run_blender.sh to safely quote the path (use "blender -b -P "$SCRIPT_PATH" ...") to avoid shell-word-splitting/injection, and consider running blender under a user with minimal permissions. - Ensure the host has Blender installed and that you are comfortable granting it execution rights; the skill metadata does not declare this requirement. - If you need stronger guarantees, add runtime controls: disable Python execution in Blender if possible, restrict network egress, and mount /tmp to an isolated volume. Given these gaps between claimed constraints and what is actually executable, treat this skill as potentially dangerous unless used only in tightly sandboxed, monitored environments.

功能分析

Type: OpenClaw Skill Name: blender-animation Version: 1.0.1 The skill is classified as suspicious due to a shell injection vulnerability in 'scripts/run_blender.sh', where the '$SCRIPT_PATH' variable is unquoted, potentially allowing execution of arbitrary commands if the filename is manipulated. Furthermore, the core execution model involves the AI generating and executing Python scripts within Blender's environment; while 'SKILL.md' includes safety instructions to limit scope, the underlying Python 'bpy' environment has broad system access capabilities that could be exploited via prompt injection.

能力评估

⚠ Purpose & Capability

The skill intends to run Blender in headless mode, which is coherent with its purpose, but the package metadata does not declare Blender as a required binary. skill.json lists only 'bash' as a tool; the SKILL.md expects a 'blender' binary on PATH. There's also a version mismatch: registry metadata version is 1.0.1 while skill.json contains 1.0.0. These inconsistencies mean the runtime requirements are not fully declared.

⚠ Instruction Scope

Runtime instructions direct the agent to generate a Blender Python script and execute it with Blender. A Blender (bpy) Python script has full access to Python runtime inside Blender and can: read arbitrary files, open network connections, call subprocesses, or perform other side effects. The SKILL.md lists prohibitions (no arbitrary shell commands, no access to /etc or /home), but there is no mechanism in the skill to enforce those limits — the generated script itself could violate them. The script path is /tmp/blender_script.py (attacker-writable location), increasing risk of accidental/intentional injection or replacement if the environment isn't isolated.

✓ Install Mechanism

There is no install spec (instruction-only skill) and only a tiny wrapper script. That minimizes what the skill writes to disk. No remote downloads or extraction are present in the bundle.

ℹ Credentials

The skill declares no required environment variables or credentials, which is proportional. However, it implicitly requires a local 'blender' binary and access to /tmp; the absence of a declared binary requirement is an omission that could cause accidental misconfiguration or unexpected behavior.

✓ Persistence & Privilege

The skill is not always-enabled and is user-invocable. It does not request persistent privileges or modify other skills. Autonomous invocation is allowed by default but not unusual and not in itself flagged here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install blender-animation
安装完成后，直接呼叫该 Skill 的名称或使用 /blender-animation 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Skill now includes expanded security guidance and usage constraints. - Added detailed safety and constraint sections to clarify proper use and prohibited actions. - Included sandbox and environment requirements for safer execution. - Refined purpose, capabilities, and output sections for greater clarity. - Added explicit rules against arbitrary system access and network usage. - Updated version note to reflect security and safety improvements.

v1.0.0

Initial release of the blender-animation skill. This skill enables automated 3D animation generation using Blender in headless mode. It is designed to support programmatic scene creation and rendering workflows without requiring a GUI environment. Key capabilities: - Generates Blender Python scripts for scene setup and animation - Supports object animation, camera movement, and lighting configuration - Renders output videos in MP4 format (default: /tmp/output.mp4) - Executes Blender in fully headless mode for server environments - Returns both generated scripts and execution logs for transparency Notes: This is an initial release and may be further refined based on real-world usage. Feedback, suggestions, and contributions are welcome to improve reliability, performance, and feature coverage.

元数据

Slug blender-animation

版本 1.0.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题