stl-generator

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local Python scripts to generate STL files based on user parameters. The included scripts (scripts/angle_wedge.py, scripts/circle_cutting_jig.py, and scripts/spacing_block.py) provide safety by validating that command-line inputs are numeric (floats) before using them in geometric calculations.
  • [DYNAMIC_EXECUTION]: The instructions facilitate the creation and execution of custom CadQuery scripts by the agent. This dynamic generation is supported by a library of patterns and best practices in references/cadquery_patterns.md to ensure the resulting code remains within the functional scope of the CadQuery API.
  • [EXTERNAL_DOWNLOADS]: The skill documentation refers to installing cadquery via pip. cadquery is a well-known and reputable Python library for parametric CAD. The use of the --break-system-packages flag is a standard mechanism for managing installations in certain modern Linux environments.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied dimensions and jig requirements. The potential for malicious input is mitigated by the script-level type enforcement (float conversion) and the specific instructional framing that directs the agent to generate code following established CAD patterns rather than arbitrary shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 10:36 AM