circuit-simulator
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill configures an MCP tool called
spicebridgeusing theuvxcommand-line tool. This tool is used to execute ngspice simulations locally. Asspicebridgeis a resource associated with the skill's author (captainluzik), this is standard behavior for the skill's stated purpose of circuit simulation. - [INDIRECT_PROMPT_INJECTION]: The skill processes SPICE netlists, which are text-based descriptions of circuits. These netlists constitute untrusted data ingestion points.
- Ingestion points: User-provided circuit netlists in
SKILL.mdexamples and runtime queries. - Boundary markers: None explicitly defined in the prompt instructions to delimit user netlists from system instructions.
- Capability inventory: The skill uses
spicebridgeviauvxto execute simulation commands. - Sanitization: No specific sanitization or filtering of SPICE control blocks (
.control) is mentioned, which is the primary surface for potential instruction injection via data.
Audit Metadata