FreeCAD
v1.0.1Create or modify 3D CAD models in FreeCAD using parametric JSON operations.
⭐ 0· 131·0 current·0 all-time
byLuc@ninja7v
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (parametric FreeCAD operations) aligns with the included scripts: primitives, booleans, transforms, arrays, profiles, export and document management. The only external dependency is the FreeCAD Python libraries, which the code tries to locate. No unrelated binaries or credentials are requested.
Instruction Scope
SKILL.md instructs the agent to produce structured JSON and call the packaged engine (python scripts/cad_engine.py), then read JSON from stdout. The skill writes model.FCStd and model.step and returns object metadata; these outputs are declared. The runtime code also references an optional FREECAD_PATH and standard OS program folders to find FreeCAD — this is reasonable for locating the FreeCAD runtime but is not documented in SKILL.md.
Install Mechanism
There is no external installer or network download; code is bundled with the skill and executed via the system python. No archives or remote URLs are fetched, which keeps install risk low.
Credentials
The skill declares no required env vars, but the code optionally reads FREECAD_PATH and uses standard ProgramFiles/ProgramW6432/ProgramFiles(x86) locations to find FreeCAD. This is proportionate to the purpose (locating the FreeCAD installation). Be aware that FREECAD_PATH (if set) points the interpreter at a directory whose contents will be imported — setting it to an untrusted path could cause arbitrary code execution during import.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide agent settings, and only reads/writes files in the working directory (model.FCStd, exported files). It does not request elevated privileges or credentials.
Assessment
This skill appears to do what it claims: it runs a packaged Python engine that uses your local FreeCAD installation to create and export CAD models. Before installing or running:
- Ensure FreeCAD is installed on the host; the script will try to auto-locate it and can also use FREECAD_PATH if you set it.
- Do NOT set FREECAD_PATH to an untrusted directory — the skill imports FreeCAD modules from that path, and a malicious path could execute arbitrary Python code during import.
- The skill saves files (model.FCStd, model.step, and any export filename you request) into the working directory; confirm that writing these files is acceptable.
- There are no declared network calls or secret-collection behaviors, but the code runs local Python imports and file I/O, so run it in an environment you control (or sandbox) if you have concerns.
- Optional: review the FreeCAD installation and the working directory permissions before use. Overall the package is internally consistent with its stated purpose, though it assumes a correctly installed FreeCAD runtime.Like a lobster shell, security has layers — review code before you run it.
latestvk9765eykhs918bsahe8qas9pcs83rgy7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython