spatial-interchange

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements strict input validation through the tools.yaml file, restricting axis parameters to a predefined enum set (+X, -X, +Y, -Y, +Z, -Z) and unit scales to simple numbers. This effectively mitigates injection risks by preventing arbitrary string processing.- [SAFE]: The core logic relies on the dcc_mcp_core Python package, which is a resource provided by the skill's authoring organization (dcc-mcp). The dependency is consistent with the skill's infrastructure layer classification.- [SAFE]: External links found in the documentation point exclusively to well-known service providers and official documentation for established 3D platforms, including Autodesk, Epic Games, Unity, and the Khronos Group. These are categorized as safe references under the trusted sources rule.- [SAFE]: The Python implementation does not utilize any subprocess calls, file system writes, or network network operations. It acts as a deterministic conversion planner without making environment-altering changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 03:31 AM