skills/earthtojake/text-to-cad/dfm/Gen Agent Trust Hub

dfm

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-supplied CAD files. This ingestion of external data represents a surface for indirect prompt injection. However, the risk is effectively managed because the analysis is conducted by a deterministic local script (scripts/mold_tool.py) that reports geometry measurements. The instructions explicitly direct the agent to rely on verifiable evidence rather than inventing data. Evidence chain: (1) Ingestion points: scripts/mold_tool.py reads mesh files via trimesh. (2) Boundary markers: SKILL.md mandates specific report formats and provenance for measurements. (3) Capability inventory: The skill is restricted to geometry math and inspection without network or writing permissions. (4) Sanitization: Input processing is handled by the established trimesh library using defined mesh formats.\n- [EXTERNAL_DOWNLOADS]: The skill references official manufacturing design guides from Protolabs and Hubs. These are well-known and trusted sources in the industry, and the references are provided for data lookup rather than for executing remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 01:43 AM