kicad-symbol
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches library standards and tools from KiCad's official GitLab repositories (gitlab.com/kicad).
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external HTML tables and PDF images which could contain malicious instructions.
- Ingestion points: Processes HTML pin tables and images converted from PDFs as data sources for symbol generation (SKILL.md).
- Boundary markers: The skill explicitly instructs the agent to ask the user to review and approve the pin table, serving as a human-in-the-loop boundary.
- Capability inventory: Utilizes command-line tools such as
kicad-cliandeasyeda2kicadto perform operations. - Sanitization: No programmatic sanitization is defined, instead relying on the user's manual validation of the extracted data.
Audit Metadata