cinema4d-mcp
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill correctly identifies and targets the author's official GitHub repository (
vladmdgolam/cinema4d-mcp) as its source of truth, aligning with established vendor patterns. - [COMMAND_EXECUTION]: The skill provides extensive Python script templates designed for execution within the Cinema 4D environment using the
execute_python_scripttool. These scripts utilize the officialc4dandmographAPIs to perform legitimate scene manipulation and data extraction tasks. - [PROMPT_INJECTION]: The skill includes a 'Security Restrictions' section that explicitly instructs the AI agent to avoid generating scripts containing dangerous keywords such as
os.system,subprocess, oreval. This proactive measure helps ensure the safety of generated automation code. - [DATA_EXFILTRATION]: A diagnostic function (
c4d_raw) is provided for low-level communication with the C4D server. Analysis confirms this is restricted to127.0.0.1(localhost), which is used for local tool troubleshooting and does not pose an external data exfiltration risk. - [SAFE]: File system operations found in the baking guides are limited to managing temporary JSON caches in the system's temporary directory (
tempfile.gettempdir()), which is standard practice for handling large datasets in 3D animation workflows.
Audit Metadata