solidworks-engineering-drawing
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and processes strings from external DrawingSpec JSON files and PDF text content. These strings are used to generate Markdown reports. However, the risk is mitigated by regex-based sanitization and the domain-specific nature of the task. The skill instructions prioritize engineer review for manufactured artifacts.
- [DYNAMIC_EXECUTION]: The code utilizes the win32com and pythoncom libraries for dynamic method invocation against the SolidWorks COM API. This is a standard architectural requirement for controlling CAD software via Python on Windows. The methods called are hardcoded or derived from trusted internal logic.
- [COMMAND_EXECUTION]: The skill has the capability to control the SolidWorks application to perform file operations such as exporting PDFs and BMPs and modifying drawing entities. These capabilities are strictly limited to the CAD environment and are necessary for the skill's primary automated drafting purpose.
Audit Metadata