Soilkworks自动化控制

PassAudited by ClawScan on May 16, 2026.

Overview

This skill is a coherent SolidWorks automation helper, but users should review any generated Python script before running it because it can control SolidWorks and write local CAD files.

Before installing, make sure you are comfortable using generated Python scripts to control SolidWorks. Review each script, verify dimensions and save paths, run it on test files first, and install any needed Python dependencies from trusted sources.

Publisher note

用于控制SolidWorks软件,实现零件自动创建、草图绘制、特征生成、工程图导出、文件保存等自动化操作,通过Python的pywin32库调用SolidWorks官方COM接口执行指令。

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A generated script could create, change, export, or save SolidWorks files under the current user's account.

Why it was flagged

The skill is explicitly designed to control a local desktop CAD application and create/export/save files. This is expected for the stated purpose, but it gives generated scripts the ability to modify local design work.

Skill content
用于控制SolidWorks软件,实现零件自动创建、草图绘制、特征生成、工程图导出、文件保存等自动化操作,通过Python的pywin32库调用SolidWorks官方COM接口执行指令。
Recommendation

Review the generated operations and file paths before running them, and test on copies or a dedicated project folder when possible.

What this means

If the user runs generated Python code, it will execute with the user's local permissions and can interact with SolidWorks through COM.

Why it was flagged

The skill's workflow is to produce Python code that the user saves and runs locally. This is central to the purpose and not hidden, but running generated code carries normal local-execution risk.

Skill content
生成可直接运行的Python代码... 生成代码后,必须告诉用户:代码怎么保存、怎么运行、怎么验证结果
Recommendation

Only run generated scripts after reviewing them, confirming they match the requested CAD task, and ensuring they do not write to unintended paths.

What this means

Users may need to install or configure Python dependencies and SolidWorks themselves, so setup provenance depends on the user's choices.

Why it was flagged

The registry does not declare the Windows/SolidWorks/pywin32 runtime assumptions even though the skill text imports pywin32 modules and connects to SolidWorks COM. This is an under-declared setup requirement, not an automatic or hidden install.

Skill content
Required binaries (all must exist): none; Required env vars: none; Install specifications: No install spec — this is an instruction-only skill.
Recommendation

Install Python packages only from trusted sources, confirm pywin32 is appropriate for the environment, and run the skill only on a machine where SolidWorks automation is intended.