openscad-workshop-tools
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and referenced templates are limited to 3D geometry generation and local rendering. No malicious behaviors such as data exfiltration, obfuscation, or persistence were found.
- [COMMAND_EXECUTION]: The skill utilizes the
openscadcommand-line tool to render generated.scadfiles into PNG images for preview. This execution is scoped to local files and directories. - [INDIRECT_PROMPT_INJECTION]: The skill processes tool dimensions and features from potentially untrusted external sources like manuals or product pages.
- Ingestion points:
SKILL.md(Step 1) specifies gathering dimensions and features from external manuals or product pages. - Boundary markers: The skill uses a standardized OpenSCAD code structure to isolate parameters from geometry logic.
- Capability inventory: The agent writes
.scadfiles to theworkshop/tools/directory and executes theopenscadCLI tool. - Sanitization: Input is interpreted as numeric parameters or color arrays within the OpenSCAD language, which lacks system-level access capabilities.
Audit Metadata