kicad-export
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a local automation workflow using kicad-cli to generate PCB fabrication files. The agent is instructed to create local scripts to manage the command sequence, which is a standard practice for ensuring deterministic output in build pipelines and does not introduce risk in the context of the skill's primary purpose.\n- [SAFE]: A provided Python script,
scripts/convert_position.py, performs local CSV data transformation for manufacturer-specific formats using built-in libraries (csv,argparse,pathlib). The script operates entirely on local files with no evidence of network access, obfuscation, or unsafe system operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific schematic (.kicad_sch) and board (.kicad_pcb) files which act as ingestion points for untrusted data. While there are no explicit boundary markers or sanitization logic mentioned, the risk is negligible as the data is processed by the structured KiCad CLI tool for fabrication exports, and no exploitable capability tiers are exposed to the content of these files.
Audit Metadata