easyeda-api
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a standard and well-documented interface for interacting with EasyEDA Pro. The architecture uses a local WebSocket bridge, which is a common pattern for AI-to-client integrations.
- [COMMAND_EXECUTION]: The skill instructions guide the agent to perform standard development tasks, such as running
npm installand starting a local background server (node scripts/bridge-server.mjs). These commands are necessary for the skill's primary purpose and are not used for malicious privilege escalation or persistence. - [EXTERNAL_DOWNLOADS]: The skill utilizes the standard Node.js package registry for its
wsdependency and references official vendor domains (jlc-ext.com,jlcext.com) for downloading required EasyEDA extensions. - [PROMPT_INJECTION]: While static analysis flagged parts of the guides, these are false positives triggered by instructional language (e.g., "IMPORTANT: Session initialization") and documentation regarding error handling and API usage constraints, rather than attempts to bypass safety filters or hijack agent behavior.
Audit Metadata