kicad-export
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of the
kicad-clibinary to perform core tasks such as Electrical Rule Checks (ERC), Design Rule Checks (DRC), and the generation of Gerber, drill, and BOM files. - [DYNAMIC_EXECUTION]: Instructions encourage the agent to generate a custom Python or Bash script to orchestrate the specific sequence of
kicad-clicommands required for a project. This helps ensure the manufacturing output is reproducible. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to parse KiCad schematic (.kicad_sch) and board (.kicad_pcb) files. As these files can contain arbitrary text fields (e.g., in footprints or notes), they represent a potential surface for indirect prompt injection, although the risk is low as the tool primarily performs plotting and report generation.
Audit Metadata