kicad-symbol
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official KiCad project repositories on GitLab (gitlab.com/kicad/libraries/klc and kicad-library-tools) for compliance checking and symbol generation. These are reputable, well-known sources for KiCad users.
- [COMMAND_EXECUTION]: Instructions guide the agent to use CLI tools like kicad-cli and easyeda2kicad. These are standard utilities for electronic design automation tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (HTML and PDF documents) to extract pin information, which is a potential injection surface.
- Ingestion points: External HTML files and PDF images containing pin tables.
- Boundary markers: No explicit boundary markers or ignore-instructions are used for the extracted data.
- Capability inventory: The skill generates symbol definitions and uses kicad-cli for rendering.
- Sanitization: The instructions explicitly mandate a human-in-the-loop step, requiring the agent to ask the user to approve the extracted pin table before proceeding, which serves as a mitigation against malicious data input.
Audit Metadata