dwg-to-excel

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The DWGExporter class in SKILL.md utilizes the subprocess.run function to execute a local binary named DwgExporter.exe. This is the primary mechanism for the skill's data conversion functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and interpret data from external DWG files after conversion to Excel databases.
  • Ingestion points: The read_entities method in SKILL.md reads converted data from Excel files into pandas DataFrames, which are then processed by the agent.
  • Boundary markers: The instructions do not define specific delimiters for separating user data from system instructions during the analysis phase.
  • Capability inventory: The skill possesses filesystem access permissions and the ability to execute the specific CLI tool via subprocess calls.
  • Sanitization: There is no explicit sanitization or filtering demonstrated for the raw text content (such as text annotations or block attributes) extracted from the drawing files before it is processed by the assistant.
  • [SAFE_EXTERNAL_RESOURCE]: The skill includes links to the author's official website and GitHub repository for project documentation and support. These references are consistent with the skill's stated purpose and originate from the vendor's own infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 01:08 AM