keychron-hardware-design
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of industrial design assets from the official Keychron Hardware Design repository on GitHub. This is a well-known and legitimate source for the CAD models described.
- [COMMAND_EXECUTION]: The skill contains utility scripts and commands for cloning repositories and processing CAD data using standard Python libraries such as cadquery and ezdxf. These operations are consistent with the skill's stated purpose of hardware modification.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data formats including STEP, DXF, DWG, and PDF. This establishes an ingestion surface for third-party content within the agent's workflow.
- Ingestion points: CAD design files downloaded from the Keychron-Keyboards-Hardware-Design repository.
- Boundary markers: Absent; the scripts do not implement specific delimiters for the content of the processed files.
- Capability inventory: Includes file reading, 3D geometry manipulation, and file export via CAD toolchains.
- Sanitization: Standard CAD library parsers are used; no additional sanitization of the internal file metadata or structure is performed.
Audit Metadata