cadcraft-bolt-circle
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/draw_bolt_circle.pyexecutes an external CLI tool usingsubprocess.run. It correctly passes arguments as a list and avoids shell execution, mitigating command injection risks. The executable path is provided as a CLI argument, which is standard for tool-integration skills. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied geometric parameters through
scripts/draw_bolt_circle.py. Ingestion points include CLI arguments for dimensions and counts. Boundary markers and sanitization are implemented via strict numeric validation (finite checks, range limits) and geometric collision detection. The capability inventory is limited tosubprocess.runcalls to a CAD utility. - [EXTERNAL_DOWNLOADS]: The skill references technical examples and documentation from the official
ezdxfrepository on GitHub. These references are used for attribution and CAD standard compliance, representing a safe use of a well-known repository.
Audit Metadata