export-stl
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a utility for converting 3D design files using a local OpenSCAD installation. All operations are confined to the local filesystem and intended input/output files.
- [COMMAND_EXECUTION]: The
export-stl.shscript executes theopenscadcommand using Bash arrays. This is a security best practice that prevents command injection vulnerabilities even if filenames contain special characters or spaces. - [DATA_EXPOSURE]: The skill does not access sensitive directories (like
.sshor.aws), hardcoded credentials, or environment variables. It only reads the user-specified input file and writes the resulting STL file. - [EXTERNAL_DOWNLOADS]: The skill does not download any external scripts, binaries, or packages at runtime. It relies on a pre-installed OpenSCAD application and provides a link to the official project website in case of missing dependencies.
Audit Metadata