solidworks-fillet-chamfer-cnc

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/hold_line_bridge.py

Suspicious behavior pattern: this wrapper dynamically compiles native C++ (cl.exe), generates a SWBasic macro referencing the produced DLL, and executes it inside SolidWorks via COM (RunMacro2). It also compiles and runs a C# EXE. There is an opt-in guard for known-bad builds, and no network/exfiltration code is visible in this fragment, but the dynamic native code execution + macro execution makes the overall supply-chain risk non-trivial. Confidence is limited because the compiled source code files are not included in the provided fragment.

Confidence: 62%Severity: 55%
Audit Metadata
Analyzed At
Oct 10, 2026, 08:20 AM
Package URL
pkg:socket/skills-sh/wzyn20051216%2Fsolidworks-automation-skill%2Fsolidworks-fillet-chamfer-cnc%2F@de8e08743087867d3501263b6154c60b599614ae20aebdcb1722fa2a93e79f08