grasshopper-workflow

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts with a local Grasshopper MCP server over TCP via localhost:8080, facilitating secure local communication without external network dependencies.
  • [SAFE]: File system operations are confined to reading and writing internal project files, such as .mmd design specifications and .json mapping files, used to maintain state within the modeling workflow.
  • [SAFE]: The skill uses standard Python libraries for networking and parallel processing. The dynamic module loading observed in the CLI tool is restricted to the skill's own local directory and used solely for package compatibility.
  • [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized privilege escalation was found in the provided scripts or documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 07:17 AM
Security Audit — agent-trust-hub — grasshopper-workflow