spatial-interchange
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strict input validation through the
tools.yamlfile, restricting axis parameters to a predefined enum set (+X, -X, +Y, -Y, +Z, -Z) and unit scales to simple numbers. This effectively mitigates injection risks by preventing arbitrary string processing.- [SAFE]: The core logic relies on thedcc_mcp_corePython package, which is a resource provided by the skill's authoring organization (dcc-mcp). The dependency is consistent with the skill's infrastructure layer classification.- [SAFE]: External links found in the documentation point exclusively to well-known service providers and official documentation for established 3D platforms, including Autodesk, Epic Games, Unity, and the Khronos Group. These are categorized as safe references under the trusted sources rule.- [SAFE]: The Python implementation does not utilize any subprocess calls, file system writes, or network network operations. It acts as a deterministic conversion planner without making environment-altering changes.
Audit Metadata