cad
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
cadgenpackage (version 0.5.1) from PyPI and uses Playwright to download the Chromium browser for rendering purposes. These resources originate from the skill author (earthtojake) and well-known vendors respectively. - [COMMAND_EXECUTION]: The skill utilizes the
cadgenCLI for inspection, snapshots, and build operations. It also directs the agent to execute its own generated Python CAD models using the local Python interpreter (e.g.,python <model>.py). - [DYNAMIC_EXECUTION]: The primary and intended mechanism of the skill is the dynamic generation and execution of Python source code to produce CAD geometry in formats such as STEP, STL, and GLB.
- [INDIRECT_PROMPT_INJECTION]: The skill processes natural language specifications and reference images to create executable scripts. It mitigates the risk of unintended behavior by implementing a structured workflow that includes a 'CAD brief' planning phase and multiple mandatory deterministic validation steps (topology checks, measurement verification, and snapshot reviews) to ensure the output matches the intent.
Audit Metadata