cad-viewer — security audits

Passed all audits

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  No malicious patterns detected. The skill is a sophisticated tool for viewing and generating CAD and robot-description files. It functions by launching local Node.js and Python servers and executing local generator scripts (Python) or model definitions (JavaScript) to render 3D content. It includes security features such as path traversal validation to ensure file access remains within project boundaries.

  Risk: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTIONJul 11, 2026Full report

• Socket

  pass

  No alerts

  Jul 11, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWJul 11, 2026Full report