stl-generator
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts to generate STL files based on user parameters. The included scripts (
scripts/angle_wedge.py,scripts/circle_cutting_jig.py, andscripts/spacing_block.py) provide safety by validating that command-line inputs are numeric (floats) before using them in geometric calculations. - [DYNAMIC_EXECUTION]: The instructions facilitate the creation and execution of custom CadQuery scripts by the agent. This dynamic generation is supported by a library of patterns and best practices in
references/cadquery_patterns.mdto ensure the resulting code remains within the functional scope of the CadQuery API. - [EXTERNAL_DOWNLOADS]: The skill documentation refers to installing
cadqueryviapip.cadqueryis a well-known and reputable Python library for parametric CAD. The use of the--break-system-packagesflag is a standard mechanism for managing installations in certain modern Linux environments. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied dimensions and jig requirements. The potential for malicious input is mitigated by the script-level type enforcement (float conversion) and the specific instructional framing that directs the agent to generate code following established CAD patterns rather than arbitrary shell commands.
Audit Metadata