batch-cad-converter
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
subprocess.runmodule to execute external CAD conversion binaries (e.g.,RvtExporter.exe,IfcExporter.exe). - The commands are constructed using argument lists rather than shell strings, which is a security best practice that prevents shell injection vulnerabilities.
- The paths to the conversion binaries and input/output files are managed using the
pathlib.Pathmodule, ensuring cross-platform compatibility and reducing path traversal risks. - [EXTERNAL_DOWNLOADS]: The documentation references an external GitHub repository belonging to the author (
datadrivenconstruction/cad2data-Revit-IFC-DWG-DGN-pipeline...) as a resource for the conversion tools. This is documented neutrally as a vendor resource and no automated downloads occur at runtime.
Audit Metadata