stl-to-scad

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in scripts/compare.py to execute the OpenSCAD binary for rendering and comparing the generated model against the reference mesh. This is a required step for its primary functionality.
  • [EXTERNAL_DOWNLOADS]: The scripts utilize the uv tool to manage Python dependencies. Upon first use, it downloads required packages such as trimesh, numpy, and scipy from the official Python Package Index (PyPI). These are standard libraries for 3D and scientific computing.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external STL files (ingestion point) and passes geometric analysis results to the agent. While no explicit boundary markers are used, the capability inventory is limited to geometric tools, and the analysis process itself acts as a sanitization layer by reducing mesh data to structured geometric primitives and numeric coordinates.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 02:00 AM