Dwg To Dxf Converter

• Risk level: Low
• Analyzed: May 8, 2026, 2:02 PM
• Findings: 1
• Version: 1.0.0

Overview

The skill appears purpose-aligned for local DWG-to-DXF conversion, but users should verify the external ODA converter executable it runs.

This looks like a benign local file-conversion skill. Before installing or using it, make sure the ODAFileConverter.exe it will run is installed from a trusted source and is not being resolved from an unexpected PATH location.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Low

What this means

Conversion may fail if ODA is not installed, or could run an unexpected executable if an untrusted ODAFileConverter is present on the system PATH.

Why it was flagged

The script runs an external converter executable, including one found on PATH, while the metadata declares no required binaries and the manifest does not include tools/oda.

Skill content

INTERNAL_ODA = BASE_DIR / "tools" / "oda" / "ODAFileConverter.exe" ... found = shutil.which("ODAFileConverter.exe") or shutil.which("ODAFileConverter")

Recommendation

Install ODA File Converter from the official source, verify the executable path before use, and consider declaring the dependency and Windows-only requirement in metadata.