solidworks

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The file gemini.md contains a PowerShell command designed to delete registry keys (Remove-Item -Path "HKCU:\Software\SolidWorks\SOLIDWORKS 20XX\User Interface" -Recurse -Force). Although documented as a troubleshooting step for a corrupted UI, it represents direct manipulation of the Windows Registry.
  • [DYNAMIC_EXECUTION]: The skill instructions (e.g., in SKILL.md and gpt.md) provide code templates and command-line examples for creating and running local VBA macros (.swp) and Python scripts using the win32com library. This includes instructions to launch the CAD software with macro execution flags ("sldworks.exe" /m "C:\Macros\batch.swp").
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on external data found within CAD files, such as custom properties and feature names, which provides a surface for indirect prompt injection if the metadata is crafted to influence the agent's scripting logic.
  • Ingestion points: gemini.md (CustomPropertyManager), gpt.md (GetTitle, FirstFeature).
  • Boundary markers: None present in the provided instructions.
  • Capability inventory: PowerShell registry modification (gemini.md), Script execution via COM and Shell (gpt.md), and file system operations (SKILL.md).
  • Sanitization: No sanitization or validation of the ingested metadata values is specified before their use in scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 03:40 AM