circuit-diagram-generator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates a standalone Python script (circuit-diagram.py) by adapting a provided template (scripts/circuit_diagram_template.py). This generated script is then executed to render the final diagram images.
- Evidence: Workflow instructions in SKILL.md under 'Write the generator script' and 'Render, then LOOK at the result'.
- [COMMAND_EXECUTION]: The agent is instructed to use shell commands to verify the local installation of the schemdraw library and to run the generated diagram generation scripts.
- Evidence: Shell commands for library version checking and script execution found in the SKILL.md Prerequisites and Workflow sections.
- [INDIRECT_PROMPT_INJECTION]: The skill extracts wiring information from local files such as config.py and kit source code. This ingestion of external data represents a potential surface for indirect prompt injection if those files contain adversarial instructions.
- Ingestion points: config.py and source files within the src/kits/ directory.
- Boundary markers: None explicitly mentioned in the extraction guidelines.
- Capability inventory: The skill has the capability to write files (PNG/SVG) to the filesystem and execute Python scripts via the shell.
- Sanitization: No explicit sanitization or validation of the extracted pin mapping data is described in the workflow.
Audit Metadata