Oathe Security Badge

Is lightoshadow/text-to-openscad safe?

Yes. lightoshadow/text-to-openscad is safe to install. Oathe's behavioral security audit gave the text-to-openscad skill by lightoshadow a trust score of 94/100 with 2 findings, none critical or high. Report updated

https://github.com/lightoshadow/text-to-openscad

94
SAFE

Is lightoshadow/text-to-openscad safe to install?

This is a legitimate OpenSCAD 3D modeling skill that provides tools for designing, iterating, and rendering 3D models from text descriptions. All monitoring shows normal behavior with no data exfiltration attempts or malicious code execution.

What security issues were found in lightoshadow/text-to-openscad?

Category Scores

Prompt Injection 85/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (2)

LOW Direct user input injection in prompts -15

User input is directly injected via $ARGUMENTS in skill prompts, but this is contextually appropriate as the skill is designed to take 3D model descriptions and design requests.

LOW Python script included -5

The skill includes multiview.py, a Python script for rendering OpenSCAD models from multiple angles. The script appears legitimate and only performs OpenSCAD rendering operations using subprocess calls.

Should I install lightoshadow/text-to-openscad?

Oathe's verdict for lightoshadow/text-to-openscad is SAFE with a trust score of 94/100. Recommendation: Install.