siemens-nx
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of standard Siemens NX command-line utilities, including
run_journal.exefor headless Python script execution,ug_convert_part.exefor file versioning, andugraf.exefor application startup with diagnostic flags. These are intended tools for CAD administration and automation. - [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow for processing external CAD data, which represents a potential injection surface.
- Ingestion points: Python scripts in
SKILL.mdandgemini.mdingest CAD part files (.prt) and translation formats (.stp,.iges) for processing. - Boundary markers: None (typical for binary CAD data formats).
- Capability inventory: The provided scripts perform file system operations (read/write), geometry inspection (
AskMassProps3d,CheckBody), and parametric modeling. No network operations or subprocesses that execute external data were found. - Sanitization: Not present, as the ingested data consists of geometric and topological information rather than natural language instructions.
- [DYNAMIC_EXECUTION]: The skill provides Python journal templates for Siemens NX. While these scripts automate the CAD environment via the
NXOpenAPI, they use standard, deterministic modeling functions and do not incorporate untrusted external input intoeval()orexec()calls, nor do they use unsafe deserialization.
Audit Metadata