component-sourcer

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the @jlcpcb/mcp package from the NPM registry within its platform configuration. This is a scoped package from a well-known electronics industry service provider.- [REMOTE_CODE_EXECUTION]: The skill uses the npx command to execute the @jlcpcb/mcp tool at runtime to provide component search and optimization capabilities.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied component requirements and BOM data. Ingestion points: Component specifications provided by the user to the agent. Boundary markers: None present in the instructions. Capability inventory: Executes the jlcpcb tool via stdio for catalog lookups. Sanitization: None specified for the processed data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 11:35 AM