Leaderboard github.com
arjun988/blender-skills
94 specialist Blender skills for Cursor, Claude Code, Kiro & Codex -> MCP-powered production pipeline from blockout to engine export.
AI provenance
0%
possible
- Confidence
- 44%
- Coverage
- 100%
Estimated share of AI-generated code. Explicit attribution is a lower bound.
Code quality
43/100
poor
- Confidence
- 90%
- Coverage
- 100%
Complexity, duplication, lint density, tests, CI, docs and review process.
Security
70/100
weak
- Confidence
- 85%
- Coverage
- 100%
Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.
- Repository: https://github.com/arjun988/blender-skills
- Commit:
904f095d8f36a6e72adaebb08d07f884a074743d - Generated: 2026-11-14T00:01:56+00:00
- Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2
Scores
| Pillar | Score | Signal | Confidence | Coverage |
|---|---|---|---|---|
| AI provenance (estimated AI-generated share) | 0 | possible | 44% | 100% |
| Code quality | 43 | poor | 90% | 100% |
| Security | 70 | weak | 85% | 100% |
AI provenance
Weak signals consistent with AI-assisted development.
-
Explicitly attributed share (lower bound): 0.0%
-
Unattributed share in AI-consistent velocity bursts: 0.0%
-
Estimated AI-generated share: 0.0%
-
AI tooling configured in repo: claude-code
| Month | Lines added | Attributed to AI |
|---|---|---|
| 2026-07 | 2,190 | 0% |
Evidence
- .claude/skills/analog-found-footage-horror/SKILL.md (claude-code configuration) (.claude/skil)
- .claude/skills/analog-found-footage-horror/references/found-footage-camera.md (claude-code configuration) (.claude/skil)
- .claude/skills/analog-found-footage-horror/references/vhs-comp.md (claude-code configuration) (.claude/skil)
- .claude/skills/animation/SKILL.md (claude-code configuration) (.claude/skil)
- .claude/skills/animation/references/combat-animation.md (claude-code configuration) (.claude/skil)
- .claude/skills/animation/references/walk-cycle.md (claude-code configuration) (.claude/skil)
- .claude/skills/anime-style/SKILL.md (claude-code configuration) (.claude/skil)
- .claude/skills/anime-style/references/anime-proportion.md (claude-code configuration) (.claude/skil)
- .claude/skills/anime-style/references/cel-shader-setup.md (claude-code configuration) (.claude/skil)
- .claude/skills/apocalypse-worlds/SKILL.md (claude-code configuration) (.claude/skil)
- .claude/skills/apocalypse-worlds/references/dystopia-utopia.md (claude-code configuration) (.claude/skil)
- .claude/skills/apocalypse-worlds/references/wasteland.md (claude-code configuration) (.claude/skil)
- .claude/skills/archviz/SKILL.md (claude-code configuration) (.claude/skil)
- .claude/skills/archviz/references/archviz-camera.md (claude-code configuration) (.claude/skil)
- .claude/skills/archviz/references/archviz-lighting.md (claude-code configuration) (.claude/skil)
AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.
Code quality
Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 60% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.
| Area | Score |
|---|---|
| Complexity (lizard) | 16 |
| Duplication | 100 |
| Code smells (Opengrep) | 36 |
| Tests and CI | 0 |
| Documentation | 100 |
| Type safety | 100 |
| Process (Scorecard review/maintenance) | n/a |
- Functions: 39; mean complexity 1.3, 90th percentile 2; 0 complex and 3 long functions
- Duplicated lines: 0.0% of 1,316 compared
- Tests: 0 test lines for 1,702 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
- Docs missing or thin: none
Most complex functions:
- GettingStartedPage in site/src/app/(docs)/getting-started/page.tsx: complexity 1, 180 lines
- SkillsPage in site/src/app/(docs)/skills/page.tsx: complexity 1, 112 lines
- HomePage in site/src/app/page.tsx: complexity 1, 199 lines
Security
Security posture is weak: 38 known vulnerabilities in 8 dependencies. Weakest area: posture.
| Area | Score |
|---|---|
| Secrets (gitleaks, tree + history) | 100 |
| Static analysis (Opengrep) | 100 |
| Vulnerable dependencies (OSV) | 36 |
| CI workflows (zizmor) | n/a |
| Posture (policy, updates, signing, lockfiles) | 0 |
| OpenSSF Scorecard | n/a |
-
Known vulnerabilities: 38 in 8 packages (critical 3, high 17, medium 16, low 2)
-
Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits
Top findings
| Severity | Finding | Location |
|---|---|---|
| critical | osv/GHSA-2464-fhr4-w9xw: next@14.2.35 (npm) is affected by GHSA-2464-fhr4-w9xw |
site/package-lock.json |
| critical | osv/GHSA-2xp9-vwfh-vxw4: next@14.2.35 (npm) is affected by GHSA-2xp9-vwfh-vxw4 |
site/package-lock.json |
| critical | osv/GHSA-p293-qw3h-jr36: next@14.2.35 (npm) is affected by GHSA-p293-qw3h-jr36 |
site/package-lock.json |
| high | osv/GHSA-73wf-gq98-2v4g: browserslist@4.28.4 (npm) is affected by GHSA-73wf-gq98-2v4g |
site/package-lock.json |
| high | osv/GHSA-c83g-rgw3-j3cx: browserslist@4.28.4 (npm) is affected by GHSA-c83g-rgw3-j3cx |
site/package-lock.json |
| high | osv/GHSA-28wg-ghj8-5hjv: nanoid@3.3.15 (npm) is affected by GHSA-28wg-ghj8-5hjv |
site/package-lock.json |
| high | osv/GHSA-2v37-7h3g-55p8: nanoid@3.3.15 (npm) is affected by GHSA-2v37-7h3g-55p8 |
site/package-lock.json |
| high | osv/GHSA-36qx-fr4f-26g5: next@14.2.35 (npm) is affected by GHSA-36qx-fr4f-26g5 |
site/package-lock.json |
| high | osv/GHSA-89xv-2m56-2m9x: next@14.2.35 (npm) is affected by GHSA-89xv-2m56-2m9x |
site/package-lock.json |
| high | osv/GHSA-8h8q-6873-q5fj: next@14.2.35 (npm) is affected by GHSA-8h8q-6873-q5fj |
site/package-lock.json |
| high | osv/GHSA-c4j6-fc7j-m34r: next@14.2.35 (npm) is affected by GHSA-c4j6-fc7j-m34r |
site/package-lock.json |
| high | osv/GHSA-h25m-26qc-wcjf: next@14.2.35 (npm) is affected by GHSA-h25m-26qc-wcjf |
site/package-lock.json |
| high | osv/GHSA-m99w-x7hq-7vfj: next@14.2.35 (npm) is affected by GHSA-m99w-x7hq-7vfj |
site/package-lock.json |
| high | osv/GHSA-p3m5-59mp-jv5r: next@14.2.35 (npm) is affected by GHSA-p3m5-59mp-jv5r |
site/package-lock.json |
| high | osv/GHSA-p9j2-gv94-2wf4: next@14.2.35 (npm) is affected by GHSA-p9j2-gv94-2wf4 |
site/package-lock.json |
| high | osv/GHSA-q4gf-8mx6-v5v3: next@14.2.35 (npm) is affected by GHSA-q4gf-8mx6-v5v3 |
site/package-lock.json |
| high | osv/GHSA-6g55-p6wh-862q: postcss@8.4.31 (npm) is affected by GHSA-6g55-p6wh-862q |
site/package-lock.json |
| high | osv/GHSA-r28c-9q8g-f849: postcss@8.4.31 (npm) is affected by GHSA-r28c-9q8g-f849 |
site/package-lock.json |
| high | osv/GHSA-r28c-9q8g-f849: postcss@8.5.16 (npm) is affected by GHSA-r28c-9q8g-f849 |
site/package-lock.json |
| high | osv/GHSA-68fv-2mgg-jv7q: source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q |
site/package-lock.json |
| medium | osv/GHSA-w5vr-8v7q-w6rv: baseline-browser-mapping@2.10.42 (npm) is affected by GHSA-w5vr-8v7q-w6rv |
site/package-lock.json |
| medium | osv/GHSA-3x4c-7xq6-9pq8: next@14.2.35 (npm) is affected by GHSA-3x4c-7xq6-9pq8 |
site/package-lock.json |
| medium | osv/GHSA-4633-3j49-mh5q: next@14.2.35 (npm) is affected by GHSA-4633-3j49-mh5q |
site/package-lock.json |
| medium | osv/GHSA-4c39-4ccg-62r3: next@14.2.35 (npm) is affected by GHSA-4c39-4ccg-62r3 |
site/package-lock.json |
| medium | osv/GHSA-68g3-v927-f742: next@14.2.35 (npm) is affected by GHSA-68g3-v927-f742 |
site/package-lock.json |
Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.
Repository profile
- Source lines: 1,702; test lines: 0
| Language | Lines |
|---|---|
| TypeScript | 1,688 |
| JavaScript | 14 |