kicad-layout
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project files and board layouts which could potentially contain malicious instructions if sourced from untrusted parties.
- Ingestion points: Reads project configuration from
.backplane.jsonand PCB layout files to perform routing and placement tasks. - Boundary markers: The instructions do not define explicit delimiters or warnings for the agent to ignore embedded instructions in the PCB data.
- Capability inventory: The skill utilizes IPC commands (
SaveDocument), shell-based tools (--save), and layout scripts (kiPy,tscircuit,freerouting) to modify the local filesystem. - Sanitization: There is no mention of sanitizing or validating the input data from the board files before processing them through the design tools.
Audit Metadata