Cad To Data

PendingStatic analysis audit pending.

Overview

No static analysis result has been recorded yet. Pattern checks will appear here once the artifact has been analyzed.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may cause the agent to run local converter commands to process CAD/BIM files.

Why it was flagged

The skill discloses that conversion may involve running local command-line tools. This is expected for CAD/BIM conversion, but local command execution should remain limited to trusted converters and user-selected files.

Skill content
Format-specific CLI converters invoked via subprocess.run()
Recommendation

Use trusted converter tools, review commands before running them when possible, and only process files from trusted locations.

What this means

The skill may depend on tools already installed on the user's machine, and the exact tools are not specified in the metadata.

Why it was flagged

The runtime instructions reference external CLI converters, but the registry metadata does not declare which binaries or packages are expected. This is a dependency clarity gap, not evidence of malicious behavior.

Skill content
Required binaries (all must exist): none; No install spec — this is an instruction-only skill.
Recommendation

Confirm which converter will be used for each CAD/BIM format before processing files, and avoid installing or running unknown converters.