Mola-maker/CAD2GIS

Review signals: 1 connection review, 199 hardcoded secret. 3 static matches retained as context.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 6 distinct locations. 2 attributed processes.

Gitleaks found a possible hardcoded secret; value withheld. 9 distinct locations. 63 findings.

1 encoded execution matches retained as context; full list in the evidence.

2 hardcoded secret matches retained as context; full list in the evidence.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Only 200 of 24667 findings are stored; the summary counts all of them.

Full safety evidence →

• CLI inspect reads a source drawing and reports its inspection: Real input produced the expected result: cad2gis-source-inspection-v1

  Source: cad2gis inspect "<SOURCE.dwg>" --json

  Input: {"tool": "inspect_source", "arguments": {"source": "<guest-path>"}}

  Expected: PASS

  Command: <guest-path> --transport stdio tools/call {"tool": "inspect_source", "arguments": {"source": "<guest-path>"}}

  Observed: cad2gis-source-inspection-v1\",\n \"source\": {\n \"path\": \"<guest-path>\",\n \"name\": \"simple.dxf\",\n \"sha256\": \"f8101fdc765afafcbd2de211f8e3d50d70ae9bdcd475ca528b9d4f11fc26ee81\",\n \"size_bytes\": 15638\n },\n \"inspection_status\": \"PASS\",\n \"reader\": {\n \"backend\": \"native_dxf\",\n \"completion_rows\": 4,\n \"inventory_complete\": true,\n \"parsed_rows\": 4,\n \"returned_records\": 4,\n \"skipped_rows\": 0,\n \"total_rows\": 4\n },\n \"inventory\": {\n \"entity_count\": 4,\n \"layer_count\": 3,\n \"bloc

Examples

• : command completed successfully

  Input: <guest-path> inspect <guest-path> --json

  Expected: inspection_status PASS

  Command: <guest-path> inspect <guest-path> --json

  Observed: "completion_rows": 4, "inventory_complete": true, "parsed_rows": 4, "returned_records": 4, "skipped_rows": 0, "total_rows": 4 }, "schema_version": "cad2gis-source-inventory-v1", "source": { "name": "simple.dxf", "sha256": "f8101fdc765afafcbd2de211f8e3d50d70ae9bdcd475ca528b9d4f11fc26ee81", "size_bytes": 15638 }, "style_facts": { "ACI:256|TRUECOLOR:|LINETYPE:ByLayer|LINEWEIGHT:-1": 1, "ACI:7|TRUECOLOR:|LINETYPE:BYLAYER|LINEWEIGHT:-1": 3 }, "unsupported": { "by_entity_type": {}, "by_reason": {}, "entity_keys_by_reason": {} } }

Local or hosted: local

Install CAD2GIS 0.8.0 from the pinned workspace source, install the LibreDWG runtime, and run source inspection and project bootstrap on a DXF sample, exercised through both the CLI and the cad2gis-agent-mcp stdio server.

cd <guest-path> && pwd && ls -la && git status 2>&1 | head -3; id -u; python3 --version; cat README.md 2>/dev/null | head -c 6000
ls <guest-path> ; ls /inputs 2>&1; echo "CDP=$CDP_URL"; curl -sS -m 10 -i "$CDP_URL/json/version" 2>&1 | head -20
cd <guest-path> && python3 -c "
import sys
t=open('README.md',encoding='utf-8').read()
print(t[6000:14000])"
cd <guest-path> && python3 -c "
t=open('README.md',encoding='utf-8').read()
print(t[14000:21000])"
cd <guest-path> && sed -n 1,200p workspace/pyproject.toml | head -c 3000; echo; python3 -m venv --help >/dev/null 2>&1 && echo VENV_OK || echo NO_VENV; uv --version 2>&1 | head -1
mkdir -p <guest-path> && cd <guest-path> && python3 -m venv <guest-path> && <guest-path> -m pip install -q --upgrade pip 2>&1 | tail -3; echo rc=$?
cd <guest-path> && timeout 7000 <guest-path> -m pip install -e ".[agent,test]" > <guest-path> 2>&1; echo rc=$?; tail -5 <guest-path>
cd <guest-path> && export PATH=<guest-path> && cad2gis --help 2>&1 | head -60; echo ---; find . -iname '*.dxf' | head -20; find . -iname '*.dwg' | head -5; echo ---; cad2gis-agent-mcp --help 2>&1 | head -20
cd <guest-path> && export PATH=<guest-path> && timeout 600 cad2gis doctor --deep --profile full --json > <guest-path> 2><guest-path>; echo rc=$?; head -c 2500 <guest-path>; echo; tail -c 500 <guest-path>; echo; ls tests | head -80
cd <guest-path> && export PATH=<guest-path> && find tests/fixtures tests/data -iname '*.dxf' 2>/dev/null | head; (timeout 3000 cad2gis runtime install > <guest-path> 2>&1; echo rc=$? >> <guest-path>); tail -c 2500 <guest-path>
cd <guest-path> && export PATH=<guest-path> && cat <guest-path> 2>/dev/null | tail -c 1500; pgrep -af "cad2gis runtime" | head -3; nohup cad2gis runtime install > <guest-path> 2>&1 &
echo started
pgrep -af "cad2gis runtime" ; for p in $(pgrep -f "cad2gis runtime install"); do echo "pid $p cwd=$(readlink /proc/$p/cwd) start=$(ps -o lstart= -p $p)"; done
kill 9111 2>/dev/null; sleep 2; ps -o pid,etime,args -p 2530 | cut -c1-120; ls -la <guest-path> <guest-path>; tail -c 800 <guest-path> 2>/dev/null
mkdir -p <guest-path> && cd <guest-path> && cat > <guest-path> <<'EOF'
import ezdxf
doc = ezdxf.new("R2018")
doc.header["$INSUNITS"] = 6
msp = doc.modelspace()
msp.add_line((0, 0), (100, 0), dxfattribs={"layer": "CABLE"})
msp.add_line((100, 0), (100, 50), dxfattribs={"layer": "CABLE"})
msp.add_text("POLE-1", dxfattribs={"layer": "LABEL", "insert": (10, 5), "height": 2})
doc.saveas("<guest-path>")
print("ok")
EOF
<guest-path> -I <guest-path> && ls -la <guest-path>; head -c 300 <guest-path> | head -5
cd <guest-path> && export PATH=<guest-path> && timeout 300 cad2gis inspect <guest-path> --json > <guest-path> 2><guest-path>; echo rc=$?; head -c 1500 <guest-path>; echo; head -c 600 <guest-path>
sleep 240; ps -o pid,etime,args -p 2530 | cut -c1-100; ls -la <guest-path>; tail -c 1200 <guest-path>; ls <guest-path> 2>/dev/null
cd <guest-path> && export PATH=<guest-path> && grep -c . <guest-path>; grep -iE 'error|fail|ok|install' <guest-path> | head -10 | cut -c1-200; timeout 600 cad2gis doctor --deep --profile full --json > <guest-path> 2>&1; echo rc=$?; python3 -c "
import json;d=json.load(open('<guest-path>'))
print(d['status'],d['selected_profile_ready'],d['profile_ready'],d['conversion_ready'])
for c in d['checks']:
  if c['status']!='ok': print(c['name'],c['status'],c['detail'][:200],c.get('remediation'))"
cd <guest-path> && grep -rhoE '@(mcp\.)?tool\([^)]*\)[^\n]*' src/cad2gis/agent_mcp* 2>/dev/null | head -5; grep -rlE 'def (get_capabilities|inspect_source)' src | head; grep -rhoE 'def (get_capabilities|inspect_source|get_runtime_status|audit_run)\b' src | sort | uniq -c
cd <guest-path> && grep -n 'def get_capabilities' -A30 src/cad2gis/agent_mcp.py | head -50; grep -n 'def inspect_source' -A25 src/cad2gis/agent_mcp.py | head -40
cd <guest-path> && grep -n 'def _roots' -A25 src/cad2gis/agent_mcp.py | head -45; grep -n 'def _path' -A12 src/cad2gis/agent_mcp.py | head -20
mkdir -p <guest-path> && cd <guest-path> && export PATH=<guest-path> && timeout 600 cad2gis bootstrap <guest-path> --project <guest-path> --json > <guest-path> 2><guest-path>; echo rc=$?; head -c 1200 <guest-path>; echo; head -c 800 <guest-path>; echo; find <guest-path> -maxdepth 3 | head -30
cd <guest-path> && grep -n "cad2gis inspect\|cad2gis bootstrap\|cad2gis-agent-mcp --transport stdio" README.md | head; mkdir -p .coldpass && ls -la .coldpass
cd <guest-path> && V=<guest-path> && cat > probe.json <<'EOF'
{"kind":"mcp","argv":["<guest-path>","--transport","stdio"],"cwd":"/workspace","tool":"inspect_source","arguments":{"source":"<guest-path>"},"env":{"CAD2GIS_PROJECT_ROOTS":"<guest-path>"},"expected_text":"POLE-1"}
EOF
cat > claims.json <<'EOF'
[{"kind":"claim","claim":"CLI inspect reads a source drawing and reports its inspection","source":"cad2gis inspect \"<SOURCE.dwg>\" --json","input":"<guest-path>","expected":"PASS","probe_kind":"mcp","argv":["<guest-path>","--transport","stdio"],"tool":"inspect_source","arguments":{"source":"<guest-path>"},"expected_text":"POLE-1","env":{"CAD2GIS_PROJECT_ROOTS":"<guest-path>"},"cwd":"/workspace"}]
EOF
echo '{"detected": false, "reason": "README documents no scheduler or loop; cad2gis commands are one-shot CLI and MCP invocations.", "checks": []}' > cycles.json
echo '[{"name":"bootstrap-draft","argv":["<guest-path>","bootstrap","<guest-path>","--project","<guest-path>","--json"]}]' > examples.json
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -40
cd <guest-path> && rm -rf <guest-path> && sed -i 's#"cwd":"/workspace"#"cwd":"<guest-path>"#g' probe.json claims.json && cat > examples.json <<'EOF'
[{"name":"bootstrap-draft","argv":["<guest-path>","bootstrap","<guest-path>","--project","<guest-path>","--json"],"output_directory":"<guest-path>","cwd":"<guest-path>","expected":"status draft"}]
EOF
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | head -c 3000
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay > <guest-path> 2>&1; echo rc=$?; python3 -I -c "
import json,sys
d=json.load(open('<guest-path>')) if False else None
" ; python3 -I - <<'EOF'
import json
t=open('<guest-path>').read()
o=json.loads(t[t.index('{'):])
print('valid',o.get('valid'))
for p in o.get('problems',[]): print('PROBLEM:',p[-700:])
r=o['replay']['details']
print({k:v for k,v in r.items() if k not in('tools','tool_result')})
print(r.get('tool_result',{}).get('isError'))
EOF
cd <guest-path> && rm -rf <guest-path> && sed -i 's#"expected_text":"POLE-1"#"expected_text":"cad2gis-source-inspection-v1"#g' probe.json claims.json && cat > examples.json <<'EOF'
[{"name":"inspect-dxf","argv":["<guest-path>","inspect","<guest-path>","--json"],"cwd":"<guest-path>","expected":"inspection_status PASS"}]
EOF
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay > <guest-path> 2>&1; echo rc=$?; python3 -I - <<'EOF'
import json
t=open('<guest-path>').read()
o=json.loads(t[t.index('{'):])
print('valid',o.get('valid'))
for p in o.get('problems',[]): print('PROBLEM:',p[-400:])
EOF
cd <guest-path> && python3 -I - <<'EOF'
import json
r = {
 "outcome": "success",
 "fault_owner": "none",
 "operation": "Install CAD2GIS 0.8.0 from the pinned workspace source, install the LibreDWG runtime, and run source inspection and project bootstrap on a DXF sample, exercised through both the CLI and the cad2gis-agent-mcp stdio server.",
 "operation_scope": "Local VM only. Sample input <guest-path> (generated with ezdxf). Outputs under <guest-path> No DWG conversion, no review UI, no CDP/browser use.",
 "steps": [
  "Checked Python 3.12.3 against README/pyproject requires-python >=3.11,<3.13 and created <guest-path>",
  "Ran editable install pip install -e \".[agent,test]\" from the workspace source (log: <guest-path>).",
  "Ran cad2gis runtime install in the background after a foreground run hit the exec time limit; polled until complete (log: <guest-path>).",
  "Ran cad2gis doctor --deep --profile full --json: before install not ready, after install selected_profile_ready and conversion_ready true.",
  "Ran cad2gis inspect on simple.dxf: inspection_status PASS, 4 records, LINE x2 and TEXT POLE-1.",
  "Ran cad2gis bootstrap on simple.dxf into a fresh project dir: status draft, conversion_allowed false (expected without reviewed mapping and units/CRS).",
  "Ran cad2gis-agent-mcp --transport stdio with tool inspect_source on the sample, CAD2GIS_PROJECT_ROOTS=<guest-path> isError false, schema cad2gis-source-inspection-v1, inspection_status PASS.",
  "Wrote probe.json, claims.json, cycles.json, examples.json; ran checker --validate --replay: valid true."
 ],
 "deviations": [
  "README uv tool install uses an unpinned remote main.zip; used the documented developer editable install from the pinned workspace source instead.",
  "Initial probe/claim cwd /workspace does not exist in this guest; changed to <guest-path>",
  "MCP expected_text POLE-1 did not appear in the inspect_source result; used the schema marker cad2gis-source-inspection-v1 that the observed result contains.",
  "Bootstrap example was not replayable against a persisted project dir; replaced with the read-only cad2gis inspect example.",
  "/inputs/coldpass-preflight.py does not exist here; used <guest-path> as instructed.",
  "Doctor reports libredwg_cli_text_fidelity as not_evaluated (executable digest not checked); recorded as caveat, not a blocker."
 ],
 "stuck_step": None,
 "main_blocker": None,
 "plain_failure": None,
 "suggested_fix": "None required for the verified path. Optionally pin the README uv install command to a tagged release or commit instead of main.zip."
}
json.dump(r, open('report.json','w'), ensure_ascii=False, indent=2)
print("written")
EOF
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | head -c 300