parametric-3d-printing

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
run_cadquery_model.py

The code appears to be a legitimate CadQuery model execution and artifact-processing utility. It contains no evident malware, exfiltration, hardcoded secrets, or obfuscation. However, it executes the supplied Python script with the caller's privileges and inherited environment, so untrusted model files must not be run without sandboxing or stronger isolation. Mesh parsing and preview rendering also process filesystem-controlled data and should use trusted, hardened dependencies.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Oct 26, 2026, 05:00 PM
Package URL
pkg:socket/skills-sh/flowful-ai%2Fcad-skill%2Fparametric-3d-printing%2F@9147289e8c7334f8e54e6817e1a9b21ed4954bf7