kicad-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs
ripgrep(rg) to conduct a deep search across the entire$HOMEdirectory, including hidden and ignored files, to find KiCad binaries. While the search is filtered by specific filename globs (e.g.,*kicad*.appimage), the use of--no-ignoreand--hiddenon the entire home directory is an aggressive discovery pattern that exposes local directory structures to the agent. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external design data (KiCad schematics and PCBs) while maintaining access to powerful tools like the KiCad CLI and Python script execution.
- Ingestion points: KiCad project files (
.kicad_sch,.kicad_pcb,.kicad_pro), symbol and footprint library tables, and local project scripts. - Boundary markers: Absent. The instructions do not define delimiters or provide guidance on ignoring natural language instructions that might be embedded in CAD comments, net names, or metadata.
- Capability inventory: Execution of
kicad-clisubcommands (ERC, DRC, exports), generation and execution of Python automation scripts usingkicad-python(kipy) andkicad-sch-api, and system GUI automation. - Sanitization: Absent. There is no requirement for the agent to sanitize or validate strings retrieved from CAD files before using them in further logic or command generation.
- [DYNAMIC_EXECUTION]: The workflow encourages the agent to generate and maintain 'durable' Python scripts for complex PCB and schematic transformations. This involves the runtime creation and execution of code within the project environment using the
kicad-pythonandkicad-sch-apilibraries.
Audit Metadata