design-solidcraft
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate utility for parametric 3D design using the SolidCraft MCP server. No malicious patterns were identified.
- [EXTERNAL_DOWNLOADS]: Documents official installation methods for the required CLI tool from the vendor's website and GitHub repository (tangency-labs). These are intended for user-side setup and are handled safely.
- [DATA_EXFILTRATION]: No sensitive data access or exfiltration patterns detected. The skill correctly instructs the user on how to scope the MCP server's file system access using '--allow-path' and probing output folders.
- [PROMPT_INJECTION]: No attempts to override safety filters or disregard system instructions. The use of 'IMPORTANT' and 'CRITICAL' in the text is for procedural emphasis within the design workflow.
- [OBFUSCATION]: Content is clear and readable with no encoding or hidden characters.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided prompts and sketches. Ingestion Points: User prompts and image sketches (SKILL.md). Boundary Markers: A multi-stage 'Design Brief Gate' requires explicit user approval before CAD operations. Capability Inventory: SolidCraft MCP tools for CAD generation and local file export. Sanitization: The skill relies on structured CAD command generation and user confirmation cycles to mitigate risks from untrusted data.
Audit Metadata