home-designer-activation-toolkit
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [PROMPT_INJECTION]: The skill defines triggers for piracy-related requests such as 'unlock premium features' or 'activate without subscription'. It provides explicit instructions for the AI agent to override these requests by refusing assistance, explaining the legal risks, and redirecting the user to legitimate alternatives.
- [EXTERNAL_DOWNLOADS]: The documentation includes a link to download Sweet Home 3D from SourceForge. This is a well-known and legitimate service used for distributing open-source software.
- [COMMAND_EXECUTION]: The skill provides standard installation commands using the system package manager (
sudo apt install) for legitimate tools like Sweet Home 3D and FreeCAD. These are provided as educational examples for manual user execution. - [CREDENTIALS_UNSAFE]: The skill references the use of environment variables for API keys (
AUTODESK_API_KEY=$AUTODESK_API_KEY). This demonstrates safe secret management practices by avoiding hardcoded credentials and using shell-injected variables instead.
Audit Metadata