cad
An agent skill by earthtojake, from earthtojake/text-to-cad. Tags: automation, design, developer-tools, documentation, local-workflow.
What it does
Create/edit parametric CAD models, organize CAD projects, export STEP/STL/3MF/GLB files, resolve prompt references, and measure geometry with cadgen.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add earthtojake/text-to-cad --skill cadOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/earthtojake/text-to-cad
cp -r text-to-cad/skills/cad ~/.claude/skills/cadSafety box score
Grade C, moderate risk: 35 of 100 risk points, rated 2026-10-15. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill builds and inspects CAD models by running Python model scripts, exporting STEP/STL/3MF/GLB, and launching a local viewer. The main risks are arbitrary code execution in those model scripts, first-run downloads of the pinned `cadgen` package and browser, and writes to the CAD cache outside the project tree.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 3 (high) | It explicitly runs Python model scripts (`python <model>.py`) and the pinned `uvx ... --from cadgen==0.7.21` toolchain, so any model body or helper code executes locally with the user's permissions. |
| Network access | 2 (moderate) | The skill says the first run "downloads that installation and the first snapshot its headless browser," so it fetches code and browser artifacts from the network. |
| Filesystem reach | 2 (moderate) | It writes generated CAD outputs and stores build state in the user's CAD cache; the docs name `~/.cache/cadgen` as the store location and the project folders `STEP/`, `STL/`, `GLB/`, `3MF/`, and `tmp/` as write targets. |
| Secrets & credentials | 0 (none) | The skill does not mention tokens, passwords, keychains, `.env` files, or browser sessions. |
| Privilege & persistence | 0 (none) | No sudo, global installs, services, shell startup edits, or OS settings are required by the skill. |
| Instruction hijack surface | 0 (none) | The files contain workflow guidance for CAD work, but nothing that fetches remote instructions or tells the agent to ignore its rules or hide actions. |
| Irreversible actions | 1 (low) | It autonomously creates, regenerates, exports, and opens local CAD artifacts, but it does not publish, pay, deploy, or delete external resources. |
| Transparency | 2 (moderate) | The runtime depends on downloaded components (`cadgen==0.7.21` and a headless browser) that are not shipped in the skill repo, so reviewers cannot inspect that code here. |
Before installing
- Read any entrypoint model before running it; it is arbitrary Python, not a sandboxed DSL.
- Decide whether the first-run downloads of `cadgen` and the headless browser are acceptable on this machine.
- Check that writing to `~/.cache/cadgen` and the CAD output folders (`STEP/`, `STL/`, `GLB/`, `3MF/`) is okay for this user account.
Rated 2026-10-15 by an automated review of 15 files from the skill's repository.
Source
- Repository
- earthtojake/text-to-cad (all skills from this repository)
- Path
- skills/cad/SKILL.md
- Branch
- main
- Updated
- 2026-09-19
Related skills
- dxf — Generate, regenerate, and validate 2D DXF drawings from Python build123d sources.
- sdf — SDFormat/SDF model and world authoring, validation, and simulator handoff.
- cli-developer — Use when building CLI tools, implementing argument parsing, or adding interactive prompts.
- devcontainer-setup — Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes.
- shadcn-ui — Expert guidance for integrating and building applications with shadcn/ui components, including component discovery, installation, customization.
- cad-viewer — Start CAD Viewer and return review links for CAD and robot-description files.