solidworks-engineering-drawing

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes drawing specifications from external JSON files which define the drawing structure and content. * Ingestion points: Drawing specifications are loaded in scripts/drawing_spec.py from JSON files or memory mappings. * Boundary markers: Uses a comprehensive JSON schema (schemas/drawing_spec.schema.json) for input validation. * Capability inventory: Interacts with SolidWorks via COM to create views, dimensions, and tables; performs local file system writes for exports (PDF, slddrw, BMP). * Sanitization: Validates data types, enums, and coordinate values using the jsonschema library.
  • [DYNAMIC_EXECUTION]: The skill employs dynamic method resolution and COM invocation to maintain compatibility across different SolidWorks versions. * Evidence: scripts/drawing_workflow.py uses getattr and InvokeTypes (with specific DISPIDs like 2 for GetText and 91 for SetPosition2) to interact with SolidWorks COM objects.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 09:54 AM
Security Audit — agent-trust-hub — solidworks-engineering-drawing