electronics-sourcing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill defines standard workflows for component search, pricing, and availability checks using the electronics sourcing toolset. These instructions follow domain-specific practices for procurement.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including BOM files, KiCad projects, and datasheets, creating a surface for indirect injection.\n
- Ingestion points: External component lists and datasheet content are ingested into the agent context via
upload_bom,read_datasheet, andextract_bom_from_kicadinSKILL.md.\n - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts for the external data.\n
- Capability inventory: The agent can perform manufacturing quotes, cost calculations, and project analysis based on ingested data.\n
- Sanitization: No specific sanitization of external file content is described in the prompt logic.\n- [COMMAND_EXECUTION]: The skill documents the invocation of
kicad-clito extract component information from local KiCad project files.
Audit Metadata