siemens-nx

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of standard Siemens NX command-line utilities, including run_journal.exe for headless Python script execution, ug_convert_part.exe for file versioning, and ugraf.exe for application startup with diagnostic flags. These are intended tools for CAD administration and automation.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow for processing external CAD data, which represents a potential injection surface.
  • Ingestion points: Python scripts in SKILL.md and gemini.md ingest CAD part files (.prt) and translation formats (.stp, .iges) for processing.
  • Boundary markers: None (typical for binary CAD data formats).
  • Capability inventory: The provided scripts perform file system operations (read/write), geometry inspection (AskMassProps3d, CheckBody), and parametric modeling. No network operations or subprocesses that execute external data were found.
  • Sanitization: Not present, as the ingested data consists of geometric and topological information rather than natural language instructions.
  • [DYNAMIC_EXECUTION]: The skill provides Python journal templates for Siemens NX. While these scripts automate the CAD environment via the NXOpen API, they use standard, deterministic modeling functions and do not incorporate untrusted external input into eval() or exec() calls, nor do they use unsafe deserialization.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 03:28 AM