Repository navigation
v1.0.0 | First Official Release
Core Security Analysis
- Comprehensive Script Detection
- Multi-source scanning: Analyzes scripts from:
- Text blocks
- Node groups
- Event handlers
- Custom properties
- Embedded script detection:
- Identifies obfuscated scripts in base64, hexadecimal, and other encodings
- Real-time monitoring:
- Background scanning for new or modified scripts
- Multi-source scanning: Analyzes scripts from:
Advanced Threat Detection
- Security Rules Covering Critical Vulnerabilities:
- System command execution
- Network communication attempts
- File system manipulation
- Dynamic code execution (
eval,exec) - Base64/hex obfuscation patterns
- Credential harvesting attempts
- Blender-specific threats:
- Driver expression injection
- Handler manipulation
- Addon abuse
Active Protection Systems
-
Auto-Protection on Startup
- Disables "Auto Run Python Scripts" for instant security
- File load/save hooks trigger immediate security analysis
- Critical threat countdown: 10-second warning before Blender auto-closes
-
Secure Script Execution
Ctrl+Poverride: Pre-check before execution- Three execution modes:
- Secure Execution (Recommended) – Full analysis
- Bypass Mode (Advanced Users) – With risk acknowledgment
- Standard Execution (Unsecured) – Original Blender behavior
Risk Assessment & Reporting
-
Multi-level Risk Classification:
CRITICAL: Immediate system threat (Blender closes)HIGH: Significant risk (execution blocked)MEDIUM: Potential threat (warned, but allowed)LOW: Minor concerns (logged only)
-
Detailed Analysis Reports:
- AST-based deep code inspection
- Obfuscation detection scoring
- Suspicious import tracking
- Network activity flagging
- Console logging with threat breakdowns
User Interface & Controls
-
BlendScan Panel (Text Editor Sidebar)
- Auto-run status display & toggle
- One-click current script analysis
- Global security controls
- Real-time threat indicators
-
Security Warning Dialogs
- Countdown warning with automatic Blender shutdown
- Threat detail display & risk indicators
- Security recommendations & emergency shutdown
Monitoring & Detection
-
Continuous Background Monitoring
- Scans every 2 seconds for threats
- Hash-based change detection
- Real-time response to modified scripts
- Persistent tracking of:
- Event handlers
- Drivers
- Custom properties
-
Driver & Property Analysis
- Driver expression injection detection
- Hidden script checks in custom properties
- Animation data & material property analysis
Advanced Features
-
Anti-Evasion Techniques
- Multiple encoding detection:
- Base64, hex, Unicode
- Obfuscation pattern recognition
- Time-based evasion detection
- VM/debugger awareness
- Multiple encoding detection:
-
Blender Integration
- Handler registration monitoring
- Addon legitimacy verification
- Node script scanning (Geometry/Shader nodes)
- Scene-wide script surveillance
Developer & Power User Tools
-
Manual Analysis Tools
- Analyze individual scripts with full reports
- Batch script scanning
- Optional security bypass
- Detailed console logs
-
Extensible Security Rules
- Pattern-based system for easy rule updates
- Organized by:
- Category: System, Network, Obfuscation, etc.
- Severity level
- Blender-specific tags