k2-3d-printing
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows a structured 'evidence boundary' approach, requiring the agent to verify physical printer identity and source authority before providing hardware-specific guidance.\n- [COMMAND_EXECUTION]: The skill includes Python scripts (
inspect_3mf.py,extract_creality_settings.py,compare_profiles.py,check_source_freshness.py) for processing 3D model files and metadata. These scripts use the Python standard library and do not invoke shell commands or perform unsafe dynamic execution.\n- [EXTERNAL_DOWNLOADS]: Thecheck_source_freshness.pyscript includes functionality to verify the reachability of documentation links viaurllib.request. This feature is disabled by default (requires a flag) and is used for metadata validation, not code execution.\n- [SAFE]: The_common.pyutility module implements security controls for archive processing (ZipSlip mitigation), including path traversal checks, file size limits, and compression ratio monitoring to prevent resource exhaustion attacks.\n- [SAFE]: No credentials, obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were identified in the instructions or code.
Audit Metadata