component-sourcer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
@jlcpcb/mcppackage from the NPM registry within its platform configuration. This is a scoped package from a well-known electronics industry service provider.- [REMOTE_CODE_EXECUTION]: The skill uses thenpxcommand to execute the@jlcpcb/mcptool at runtime to provide component search and optimization capabilities.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied component requirements and BOM data. Ingestion points: Component specifications provided by the user to the agent. Boundary markers: None present in the instructions. Capability inventory: Executes thejlcpcbtool via stdio for catalog lookups. Sanitization: None specified for the processed data.
Audit Metadata