Cad To Data
PassAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill is aligned with converting user-supplied CAD/BIM files, but users should be aware it expects filesystem access and may run external converter commands.
This skill appears benign and purpose-aligned. Before installing or using it, make sure you trust the CAD/BIM files and any local converter tools it calls, and avoid processing confidential project files unless you are comfortable with the local filesystem reads and generated exports.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill may cause the agent to run local converter commands to process CAD/BIM files.
The skill discloses that conversion may involve running local command-line tools. This is expected for CAD/BIM conversion, but local command execution should remain limited to trusted converters and user-selected files.
Format-specific CLI converters invoked via subprocess.run()
Use trusted converter tools, review commands before running them when possible, and only process files from trusted locations.
The skill may depend on tools already installed on the user's machine, and the exact tools are not specified in the metadata.
The runtime instructions reference external CLI converters, but the registry metadata does not declare which binaries or packages are expected. This is a dependency clarity gap, not evidence of malicious behavior.
Required binaries (all must exist): none; No install spec — this is an instruction-only skill.
Confirm which converter will be used for each CAD/BIM format before processing files, and avoid installing or running unknown converters.