attack-path-analysis
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Create 3D models with Meshy AI from text or images, then texture, remesh, rig, animate, convert or prepare them for 3D printing, and show them as interactive 3D cards in chat.
$ npx -y skills add CoWork-OS/CoWork-OS --skill meshy-3d --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/meshy-3dContext preview
The summary Claude sees to decide when to auto-load this skill.
Create 3D models with Meshy AI from text or images, then texture, remesh, rig, animate, convert or prepare them for 3D printing, and show them as interactive 3D cards in chat.
name: meshy-3d description: "Create 3D models with Meshy AI from text or images, then texture, remesh, rig, animate, convert or prepare them for 3D printing, and show them as interactive 3D cards in chat." version: "1.0.0" metadata: author: CoWork OS Contributors <info@coworkosapp.com> source: https://github.com/meshy-dev/meshy-mcp-server
Make and edit 3D assets on Meshy's cloud through the Meshy connector (Meshy's own MCP server): text or image to 3D, texturing, remeshing, rigging, animation, format conversion, real-world resizing, UV unwrapping, concept images, printability checks and repair, multicolor 3MF and splitting into printable parts. Most calls spend the user's Meshy credits.
1. Pick the route before the first paid call, because `target_formats` is fixed at creation:
2. Pick the detail level unless the user said: ask what the asset is and where it goes, not for a triangle number. Game assets use Smart Topology (`model_type: "smart-topology"`) at about 15k triangles for a hero character, 5-15k for an NPC, 3k for a weapon, 1.5k for a small prop (mobile about half). Renders, close-ups and prints use full detail. Polycount does not change the price. 3. Submit once. Every create returns a `task_id`; keep it. If a create times out or fails with a network or 5xx error, the task may exist and be billed: check `meshy_list_tasks` before creating again. 4. Don't wait when nothing needs the result yet. Right after a create, end your reply with the card line on its own: `::model{task="<task_id>" title="<short name>"}` The card shows Meshy's progress, then the model with Download and Next menus. Wait with `meshy_get_task_status` (it waits up to 5 minutes per call; poll again if it times out) only when the next step needs the finished task. 5. Download with `meshy_download_model`, one `format` per call, the one the use case needs. Always pass `save_to` as an ABSOLUTE path inside the workspace (for example `<workspace>/models/treasure-chest.glb`) unless the user named another folder. Report each saved path and its size. 6. Show the model: after a GLB download, end the reply with one line per model: `::model{path="<absolute path of the .glb>" task="<task_id>"}` The card is an interactive viewer (orbit, wireframe, animation clips) whose Download menu saves any other format Meshy made for that task, free. Write the path in prose too. 7. Report what the file holds: format, credits spent, the actual triangle count (not the target) and the task id for follow-ups (refine, rig and convert reuse it instead of regenerating). Say "rigged" or "animated" only when the viewer or the file shows a skeleton or clips.
| Use | Format | |---|---| | Godot, web, three.js, sharing a viewable file | GLB | | Unity, Unreal, Maya, 3ds Max, C4D | FBX (OBJ for a static mesh) | | Apple AR (Quick Look, Vision Pro) | USDZ | | Single-colour 3D print | STL, or OBJ with `print_ready: true` | | Multicolour 3D print | 3MF via `meshy_process_multicolor` |
A finished task already holds signed links to all its formats (`model_urls` in the structured result of `meshy_get_task_status`); downloading one is free. If a format is missing, `meshy_convert` costs 1 credit. Links expire 3 days after the task finished; saved files are permanent. Never call a download "game-ready": it has no LODs or collision mesh, and scale or pivot may need fixing.
In a Slack, Telegram, Discord or other channel conversation the `::model` line shows as text: give the thumbnail link, the saved path and the next steps as a short numbered list with their credit costs instead (for example: 1. Texture it · 10 cr 2. Remesh · 5 cr 3. Check printability · free).
Rent the model. Own everything else. Free, open-source AI app for real work.
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated…
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate…
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger…
Use when the user asks for a security review of a pull request, commit, branch diff, working-tree patch, or other Git-backed…
Use when the user asks for a repository-wide or scoped-path security scan.