Create Dxf

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: create-dxf Version: 0.1.1 The skill is designed to generate DXF and SVG files from a JSON specification. The `SKILL.md` provides clear, local Python commands for validation and rendering, without any prompt injection attempts to deviate agent behavior. The `scripts/create_dxf.py` script uses standard Python libraries for file I/O (reading JSON, writing DXF/SVG) and geometric calculations, with no evidence of network communication, access to sensitive data, arbitrary command execution, or obfuscation. All observed behaviors are directly aligned with the stated purpose of a CAD file generation utility.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill will run local Python code and create files in the chosen output directory.

Why it was flagged

The skill is used by running a bundled local Python script that reads a JSON spec and writes output files. This is central to the CAD-generation purpose, but users should notice that local code execution is involved.

Skill content
python3 scripts/create_dxf.py render spec.json --outdir out
Recommendation

Run it only with specs and output paths you choose, and review the generated CAD files before sending them for quoting or fabrication.

What this means

An agent or user following the reference prompt exactly may try to run a missing or wrong script.

Why it was flagged

A reference document points to scripts/rfq_cad.py, while the provided manifest and SKILL.md use scripts/create_dxf.py. This appears to be a stale filename rather than malicious behavior, but it is a provenance/packaging inconsistency.

Skill content
python3 scripts/rfq_cad.py validate <spec.json>
Recommendation

Use the SKILL.md command path, scripts/create_dxf.py, and update stale documentation references before relying on automated workflows.