esp32-idf
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the ESP-IDF framework and its associated toolchain directly from Espressif's official GitHub repository.
- Evidence: The skill references cloning from https://github.com/espressif/esp-idf.git and running the setup script ./install.sh. These are well-known and standard resources for the ESP32 development ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and interprets local project files which can act as a vector for indirect instructions.
- Ingestion points: Project-specific files such as sdkconfig, partitions.csv, and CMakeLists.txt are parsed during the build process.
- Boundary markers: No explicit delimiters are used to differentiate between data and potentially malicious instructions within these files.
- Capability inventory: The skill possesses the capability to execute shell commands through the idf.py tool.
- Sanitization: There is no specific logic described for sanitizing input from these configuration files, which is typical for developer-focused build utilities.
Audit Metadata