stl-to-scad
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/compare.pyto execute the OpenSCAD binary for rendering and comparing the generated model against the reference mesh. This is a required step for its primary functionality. - [EXTERNAL_DOWNLOADS]: The scripts utilize the
uvtool to manage Python dependencies. Upon first use, it downloads required packages such astrimesh,numpy, andscipyfrom the official Python Package Index (PyPI). These are standard libraries for 3D and scientific computing. - [INDIRECT_PROMPT_INJECTION]: The skill processes external STL files (ingestion point) and passes geometric analysis results to the agent. While no explicit boundary markers are used, the capability inventory is limited to geometric tools, and the analysis process itself acts as a sanitization layer by reducing mesh data to structured geometric primitives and numeric coordinates.
Audit Metadata