solidworks
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The file
gemini.mdcontains a PowerShell command designed to delete registry keys (Remove-Item -Path "HKCU:\Software\SolidWorks\SOLIDWORKS 20XX\User Interface" -Recurse -Force). Although documented as a troubleshooting step for a corrupted UI, it represents direct manipulation of the Windows Registry. - [DYNAMIC_EXECUTION]: The skill instructions (e.g., in
SKILL.mdandgpt.md) provide code templates and command-line examples for creating and running local VBA macros (.swp) and Python scripts using thewin32comlibrary. This includes instructions to launch the CAD software with macro execution flags ("sldworks.exe" /m "C:\Macros\batch.swp"). - [INDIRECT_PROMPT_INJECTION]: The skill operates on external data found within CAD files, such as custom properties and feature names, which provides a surface for indirect prompt injection if the metadata is crafted to influence the agent's scripting logic.
- Ingestion points:
gemini.md(CustomPropertyManager),gpt.md(GetTitle, FirstFeature). - Boundary markers: None present in the provided instructions.
- Capability inventory: PowerShell registry modification (
gemini.md), Script execution via COM and Shell (gpt.md), and file system operations (SKILL.md). - Sanitization: No sanitization or validation of the ingested metadata values is specified before their use in scripts.
Audit Metadata