esp32
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill implements proactive safety checks to prevent hardware damage, such as identifying strapping pin conflicts.
- [COMMAND_EXECUTION]: The skill uses local scripts (
scripts/validate_pinmap.pyandscripts/generate_config.py) to validate hardware configurations. These are standard engineering tools and do not involve remote access or privilege escalation. - [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection (Category 8) by processing untrusted user hardware specifications.
- Ingestion points: User input regarding ESP32 variants and pin requirements (Section 7).
- Boundary markers: Absent in the JSON schema used for script input.
- Capability inventory: Execution of local scripts
validate_pinmap.pyandgenerate_config.py. - Sanitization: Not explicitly defined in the skill documentation.
Audit Metadata