dxf
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Internal subprocess calls for system configuration and utility execution. The skill uses
subprocess.runinscripts/gen/__main__.pyto restart the Python interpreter with a fixed hash seed (PYTHONHASHSEED=0) for deterministic DXF generation. It also usessubprocess.Popeninscripts/packages/cadgen/src/cadgen/_internal/node_runtime.pyandsubprocess.runinscripts/packages/cadgen/src/cadgen/implicit_export.pyto manage Node.js builder processes for rendering and exporting tasks. Further subprocess usage is found inscripts/packages/cadgen/src/cadgen/_internal/generation.pyfor rebuilding stale subcomponents.\n- [REMOTE_CODE_EXECUTION]: Dynamic execution of generator scripts.scripts/packages/cadgen/src/cadgen/_internal/generation_runner.pyusesimportlib.util.spec_from_file_locationandloader.exec_modulewithin the_load_generator_modulefunction to load and execute arbitrary Python code from.dxf.pyand.step.pyfiles. While this is the intended mechanism for generating CAD geometry from user-defined scripts, it provides a surface for executing code generated or modified by the agent.
Audit Metadata