solidworks-engineering-drawing
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes drawing specifications from external JSON files which define the drawing structure and content. * Ingestion points: Drawing specifications are loaded in
scripts/drawing_spec.pyfrom JSON files or memory mappings. * Boundary markers: Uses a comprehensive JSON schema (schemas/drawing_spec.schema.json) for input validation. * Capability inventory: Interacts with SolidWorks via COM to create views, dimensions, and tables; performs local file system writes for exports (PDF, slddrw, BMP). * Sanitization: Validates data types, enums, and coordinate values using thejsonschemalibrary. - [DYNAMIC_EXECUTION]: The skill employs dynamic method resolution and COM invocation to maintain compatibility across different SolidWorks versions. * Evidence:
scripts/drawing_workflow.pyusesgetattrandInvokeTypes(with specific DISPIDs like 2 forGetTextand 91 forSetPosition2) to interact with SolidWorks COM objects.
Audit Metadata