circuit-simulator

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill configures an MCP tool called spicebridge using the uvx command-line tool. This tool is used to execute ngspice simulations locally. As spicebridge is a resource associated with the skill's author (captainluzik), this is standard behavior for the skill's stated purpose of circuit simulation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes SPICE netlists, which are text-based descriptions of circuits. These netlists constitute untrusted data ingestion points.
  • Ingestion points: User-provided circuit netlists in SKILL.md examples and runtime queries.
  • Boundary markers: None explicitly defined in the prompt instructions to delimit user netlists from system instructions.
  • Capability inventory: The skill uses spicebridge via uvx to execute simulation commands.
  • Sanitization: No specific sanitization or filtering of SPICE control blocks (.control) is mentioned, which is the primary surface for potential instruction injection via data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:06 AM