qwen-mm-plugins-freecad

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automates the download and installation of a FreeCAD AppImage (approximately 1 GB) on Linux-x86_64 systems during the first tool invocation. This facilitates the setup of the required CAD environment.
  • [DYNAMIC_EXECUTION]: The execute_code and execute_code_async tools provide the capability to run custom Python scripts within the FreeCAD process. This is used for advanced modeling operations, document manipulation, and performing finite-element analysis.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles external data formats such as STEP, STL, OBJ, and DXF, which could theoretically contain malicious instructions. When combined with the skill's ability to execute Python code, this creates a potential surface for indirect prompt injection. 1. Ingestion points: Loading or importing external CAD files (STEP, STL, OBJ, DXF). 2. Boundary markers: No specific delimiters or instructions to ignore embedded content are mentioned for file imports. 3. Capability inventory: Includes arbitrary Python code execution (execute_code), file system writes (saving to exports/), and object modification. 4. Sanitization: There is no mention of content validation or sanitization for imported CAD data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 02:32 AM