arjun988/blender-skills

94 specialist Blender skills for Cursor, Claude Code, Kiro & Codex -> MCP-powered production pipeline from blockout to engine export.

https://github.com/arjun988/blender-skills · commit 904f095d8f36 · scored 2026-11-14 · scoring prov-4+qual-2+sec-2

Dispute this score or request a re-score Full report JSON

Repository: https://github.com/arjun988/blender-skills
Commit: 904f095d8f36a6e72adaebb08d07f884a074743d
Generated: 2026-11-14T00:01:56+00:00
Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

Pillar	Score	Signal	Confidence	Coverage
AI provenance (estimated AI-generated share)	0	possible	44%	100%
Code quality	43	poor	90%	100%
Security	70	weak	85%	100%

AI provenance

Weak signals consistent with AI-assisted development.

Explicitly attributed share (lower bound): 0.0%
Unattributed share in AI-consistent velocity bursts: 0.0%
Estimated AI-generated share: 0.0%
AI tooling configured in repo: claude-code

Month	Lines added	Attributed to AI
2026-07	2,190	0%

Evidence

.claude/skills/analog-found-footage-horror/SKILL.md (claude-code configuration) (.claude/skil)
.claude/skills/analog-found-footage-horror/references/found-footage-camera.md (claude-code configuration) (.claude/skil)
.claude/skills/analog-found-footage-horror/references/vhs-comp.md (claude-code configuration) (.claude/skil)
.claude/skills/animation/SKILL.md (claude-code configuration) (.claude/skil)
.claude/skills/animation/references/combat-animation.md (claude-code configuration) (.claude/skil)
.claude/skills/animation/references/walk-cycle.md (claude-code configuration) (.claude/skil)
.claude/skills/anime-style/SKILL.md (claude-code configuration) (.claude/skil)
.claude/skills/anime-style/references/anime-proportion.md (claude-code configuration) (.claude/skil)
.claude/skills/anime-style/references/cel-shader-setup.md (claude-code configuration) (.claude/skil)
.claude/skills/apocalypse-worlds/SKILL.md (claude-code configuration) (.claude/skil)
.claude/skills/apocalypse-worlds/references/dystopia-utopia.md (claude-code configuration) (.claude/skil)
.claude/skills/apocalypse-worlds/references/wasteland.md (claude-code configuration) (.claude/skil)
.claude/skills/archviz/SKILL.md (claude-code configuration) (.claude/skil)
.claude/skills/archviz/references/archviz-camera.md (claude-code configuration) (.claude/skil)
.claude/skills/archviz/references/archviz-lighting.md (claude-code configuration) (.claude/skil)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 60% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

Area	Score
Complexity (lizard)	16
Duplication	100
Code smells (Opengrep)	36
Tests and CI	0
Documentation	100
Type safety	100
Process (Scorecard review/maintenance)	n/a

Functions: 39; mean complexity 1.3, 90th percentile 2; 0 complex and 3 long functions
Duplicated lines: 0.0% of 1,316 compared
Tests: 0 test lines for 1,702 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
Docs missing or thin: none

Most complex functions:

Security

Security posture is weak: 38 known vulnerabilities in 8 dependencies. Weakest area: posture.

Area	Score
Secrets (gitleaks, tree + history)	100
Static analysis (Opengrep)	100
Vulnerable dependencies (OSV)	36
CI workflows (zizmor)	n/a
Posture (policy, updates, signing, lockfiles)	0
OpenSSF Scorecard	n/a

Known vulnerabilities: 38 in 8 packages (critical 3, high 17, medium 16, low 2)
Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity	Finding	Location
critical	`osv/GHSA-2464-fhr4-w9xw`: [email protected] (npm) is affected by GHSA-2464-fhr4-w9xw	site/package-lock.json
critical	`osv/GHSA-2xp9-vwfh-vxw4`: [email protected] (npm) is affected by GHSA-2xp9-vwfh-vxw4	site/package-lock.json
critical	`osv/GHSA-p293-qw3h-jr36`: [email protected] (npm) is affected by GHSA-p293-qw3h-jr36	site/package-lock.json
high	`osv/GHSA-73wf-gq98-2v4g`: [email protected] (npm) is affected by GHSA-73wf-gq98-2v4g	site/package-lock.json
high	`osv/GHSA-c83g-rgw3-j3cx`: [email protected] (npm) is affected by GHSA-c83g-rgw3-j3cx	site/package-lock.json
high	`osv/GHSA-28wg-ghj8-5hjv`: [email protected] (npm) is affected by GHSA-28wg-ghj8-5hjv	site/package-lock.json
high	`osv/GHSA-2v37-7h3g-55p8`: [email protected] (npm) is affected by GHSA-2v37-7h3g-55p8	site/package-lock.json
high	`osv/GHSA-36qx-fr4f-26g5`: [email protected] (npm) is affected by GHSA-36qx-fr4f-26g5	site/package-lock.json
high	`osv/GHSA-89xv-2m56-2m9x`: [email protected] (npm) is affected by GHSA-89xv-2m56-2m9x	site/package-lock.json
high	`osv/GHSA-8h8q-6873-q5fj`: [email protected] (npm) is affected by GHSA-8h8q-6873-q5fj	site/package-lock.json
high	`osv/GHSA-c4j6-fc7j-m34r`: [email protected] (npm) is affected by GHSA-c4j6-fc7j-m34r	site/package-lock.json
high	`osv/GHSA-h25m-26qc-wcjf`: [email protected] (npm) is affected by GHSA-h25m-26qc-wcjf	site/package-lock.json
high	`osv/GHSA-m99w-x7hq-7vfj`: [email protected] (npm) is affected by GHSA-m99w-x7hq-7vfj	site/package-lock.json
high	`osv/GHSA-p3m5-59mp-jv5r`: [email protected] (npm) is affected by GHSA-p3m5-59mp-jv5r	site/package-lock.json
high	`osv/GHSA-p9j2-gv94-2wf4`: [email protected] (npm) is affected by GHSA-p9j2-gv94-2wf4	site/package-lock.json
high	`osv/GHSA-q4gf-8mx6-v5v3`: [email protected] (npm) is affected by GHSA-q4gf-8mx6-v5v3	site/package-lock.json
high	`osv/GHSA-6g55-p6wh-862q`: [email protected] (npm) is affected by GHSA-6g55-p6wh-862q	site/package-lock.json
high	`osv/GHSA-r28c-9q8g-f849`: [email protected] (npm) is affected by GHSA-r28c-9q8g-f849	site/package-lock.json
high	`osv/GHSA-r28c-9q8g-f849`: [email protected] (npm) is affected by GHSA-r28c-9q8g-f849	site/package-lock.json
high	`osv/GHSA-68fv-2mgg-jv7q`: [email protected] (npm) is affected by GHSA-68fv-2mgg-jv7q	site/package-lock.json
medium	`osv/GHSA-w5vr-8v7q-w6rv`: [email protected] (npm) is affected by GHSA-w5vr-8v7q-w6rv	site/package-lock.json
medium	`osv/GHSA-3x4c-7xq6-9pq8`: [email protected] (npm) is affected by GHSA-3x4c-7xq6-9pq8	site/package-lock.json
medium	`osv/GHSA-4633-3j49-mh5q`: [email protected] (npm) is affected by GHSA-4633-3j49-mh5q	site/package-lock.json
medium	`osv/GHSA-4c39-4ccg-62r3`: [email protected] (npm) is affected by GHSA-4c39-4ccg-62r3	site/package-lock.json
medium	`osv/GHSA-68g3-v927-f742`: [email protected] (npm) is affected by GHSA-68g3-v927-f742	site/package-lock.json

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

Source lines: 1,702; test lines: 0

Language	Lines
TypeScript	1,688
JavaScript	14

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/arjun988/blender-skills/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/arjun988/blender-skills/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/arjun988/blender-skills/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/arjun988/blender-skills/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/arjun988/blender-skills/security.svg)](https://repotrust.synapticcyber.com/r/github.com/arjun988/blender-skills/)