dxf
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and installs the 'cadgen' package (version 0.7.20) and a managed Python runtime via the 'uvx' tool. This installation includes a headless browser used for rendering snapshots.\n- [COMMAND_EXECUTION]: Executes shell commands to run drawing scripts, generate visual snapshots of DXF files, and manage a local CAD viewer service.\n- [DYNAMIC_EXECUTION]: The skill operates by generating and then executing Python scripts that use the 'build123d' library to create CAD geometry at runtime.\n- [INDIRECT_PROMPT_INJECTION]: The skill can read and process external geometry from STEP and DXF files, which constitutes a surface for ingesting untrusted data during the drawing generation process.
Audit Metadata