The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill manages its own Python environment and installs dependencies from a requirements file.
Evidence: scripts/run.sh uses uv pip install or pip install to fetch packages defined in requirements.txt.
Security Note: Dependencies (kicad-python, shapely, numpy, protobuf) are pinned to specific versions and include SHA-256 hashes to prevent supply chain attacks.
[INDIRECT_PROMPT_INJECTION]: The skill processes and modifies KiCad board projects, creating an indirect prompt injection surface.
Ingestion points: scripts/ipc_board.py loads board geometry, netlists, and component properties from a KiCad project via IPC.
Boundary markers: None present during data ingestion.
Capability inventory: scripts/move.py can modify component rotations and positions, and save the updated board file via the IPC API.
Sanitization: Data is parsed into structured geometry objects, but there is no explicit sanitization to prevent the agent from interpreting project data as instructions.

layout-placement