easyeda-api

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a standard and well-documented interface for interacting with EasyEDA Pro. The architecture uses a local WebSocket bridge, which is a common pattern for AI-to-client integrations.
  • [COMMAND_EXECUTION]: The skill instructions guide the agent to perform standard development tasks, such as running npm install and starting a local background server (node scripts/bridge-server.mjs). These commands are necessary for the skill's primary purpose and are not used for malicious privilege escalation or persistence.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the standard Node.js package registry for its ws dependency and references official vendor domains (jlc-ext.com, jlcext.com) for downloading required EasyEDA extensions.
  • [PROMPT_INJECTION]: While static analysis flagged parts of the guides, these are false positives triggered by instructional language (e.g., "IMPORTANT: Session initialization") and documentation regarding error handling and API usage constraints, rather than attempts to bypass safety filters or hijack agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 04:52 AM