batch-cad-converter

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's behavior is mostly aligned with batch CAD/BIM conversion and there is no direct exfiltration or credential harvesting in the reviewed code, but it relies on several proprietary external executables that are not independently verifiable and are invoked from local paths/PATH. That makes the overall footprint coherent but high-risk from a supply-chain and execution-trust perspective rather than overtly malicious.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Sep 18, 2026, 01:09 AM
Package URL
pkg:socket/skills-sh/datadrivenconstruction%2Fddc_skills_for_ai_agents_in_construction%2Fbatch-cad-converter%2F@b00c6c1682465f34f8b58c3a0e717992faca480930fd17def85a09564861ed2d