Security model

Yrendr plugins are trusted Python extensions. They execute inside the Yrendr process with the same operating-system permissions as the editor.

Security boundary

The plugin system is not a sandbox. A plugin can, subject to normal Python and operating-system permissions:

• import Python modules;
• read and write files;
• start processes or access other local resources;
• perform network activity through libraries it imports;
• use any other capability available to the current Python process.

Caution: Install and distribute plugin packages as executable code. Do not install a package that you do not trust.

Timeline processor capabilities

The capabilities field on a timeline processor is descriptive metadata. It can communicate intent such as clip creation or rendering, but it is not a permission system and does not restrict Python execution.

Developer responsibility

Keep plugin behavior explicit, validate external input, report actionable errors and avoid unexpected filesystem or network side effects.