solidcraft-file-formats
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The instructions primarily serve as documentation for developers on how to manage design file versions and add new features to the
crates/docdirectory. It defines a structured process for releases and versioning that avoids breaking changes. - [INDIRECT_PROMPT_INJECTION]: The skill addresses the risk of processing untrusted external data (STEP, IGES, 3MF, STL, OBJ files). It explicitly mandates defensive measures, including entity count caps, nesting limits, and kernel call guards to maintain crash safety. This demonstrates a security-first approach to handling external CAD data.
- [COMMAND_EXECUTION]: The skill mentions scripts used in CI and release workflows (
scripts/fold-format-pending.shandscripts/test-format-pending.sh). These are standard project maintenance tools and are not executed automatically by the agent in a hazardous manner.
Audit Metadata