esp32-lowpower
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for developers to use standard CLI tools like
idf.pyandgrepto build firmware and verify local project configurations (sdkconfig). These operations are routine for ESP32 development and do not include unauthorized or dangerous shell patterns. - [EXTERNAL_DOWNLOADS]: The skill provides links to official documentation hosted by Espressif Systems (
espressif.com). These references are used to provide high-confidence technical data directly from the hardware manufacturer. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface where instructions are based on local configuration files (
sdkconfig) and user-provided business requirements. It mitigates potential issues by instructing the agent to refuse unverified data from memory and requiring real-world measurement for power-related metrics, ensuring the agent does not output hallucinated or misleading constraints.
Audit Metadata