acad-cuix-builder
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads an installation script and the CuixBuilder.exe executable from the Autodesk Developer Network (ADN-DevTech) GitHub repository.
- [COMMAND_EXECUTION]: Uses PowerShell to run the CuixBuilder.exe utility with locally generated JSON configuration files.
- [REMOTE_CODE_EXECUTION]: Provides a fallback mechanism that clones the generator's source code from GitHub and executes it using the dotnet CLI if the pre-compiled binary is unavailable.
- [PROMPT_INJECTION]: The skill processes natural language descriptions to generate configuration files used by the build tool.
- Ingestion points: User descriptions of ribbon panels and buttons in the agent prompt (SKILL.md).
- Boundary markers: None identified for delimiting user-provided text within the generated JSON configuration.
- Capability inventory: Execution of CuixBuilder.exe and dotnet run (SKILL.md).
- Sanitization: No explicit sanitization or validation of user-provided command strings is documented before being passed to the builder.
Audit Metadata