kicad
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto interface with external utilities such as the GitHub CLI (gh) for issue exporting,pdftotextfor datasheet verification, and other internal analyzer scripts. These calls are implemented using list-based arguments, which mitigates shell injection risks. - [EXTERNAL_DOWNLOADS]: The
lifecycle_audit.pyscript and datasheet synchronization tools make network requests to well-known electronic component distributors, including DigiKey, Mouser, LCSC, and element14. These requests are used for project-specific tasks like checking component obsolescence and retrieving manufacturer documentation.
Audit Metadata