v1.0.1

FreeCAD

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:37 AM.

Analysis

This skill appears to do what it claims—run a local FreeCAD-based CAD engine—but it will create or update model files in the working folder.

GuidanceThis skill is reasonable for local CAD automation. Before installing, make sure you trust the publisher and your local FreeCAD installation, then use it in a dedicated folder because it will persist and export CAD files there.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

scripts/ops/utils.py

doc.saveAs(safe_fcstd)
...
Part.export(export_objs, safe_step)

The skill saves the FreeCAD document and exports a STEP file during operation. This is expected for a CAD skill, but it can update or overwrite local output files in the working directory.

User impactUsing the skill may create or overwrite model.FCStd, model.step, and requested export files in the current folder.

RecommendationRun it in a dedicated project directory and keep backups of important CAD files before making changes.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

scripts/cad_engine.py

fc_path = os.environ.get("FREECAD_PATH")
...
sys.path.append(p)
...
import FreeCAD

The engine dynamically imports a local FreeCAD installation from an environment or system path. This is purpose-aligned, but users should ensure that local FreeCAD installation and any FREECAD_PATH setting are trusted.

User impactIf the local FreeCAD Python environment is missing or untrusted, the skill may fail or load code from an unintended local path.

RecommendationInstall FreeCAD from a trusted source and avoid pointing FREECAD_PATH at untrusted directories.