skills/earthtojake/text-to-cad/cad/Gen Agent Trust Hub

cad

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the cadgen package (version 0.5.1) from PyPI and uses Playwright to download the Chromium browser for rendering purposes. These resources originate from the skill author (earthtojake) and well-known vendors respectively.
  • [COMMAND_EXECUTION]: The skill utilizes the cadgen CLI for inspection, snapshots, and build operations. It also directs the agent to execute its own generated Python CAD models using the local Python interpreter (e.g., python <model>.py).
  • [DYNAMIC_EXECUTION]: The primary and intended mechanism of the skill is the dynamic generation and execution of Python source code to produce CAD geometry in formats such as STEP, STL, and GLB.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes natural language specifications and reference images to create executable scripts. It mitigates the risk of unintended behavior by implementing a structured workflow that includes a 'CAD brief' planning phase and multiple mandatory deterministic validation steps (topology checks, measurement verification, and snapshot reviews) to ensure the output matches the intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:49 PM
Security Audit — agent-trust-hub — cad