visa-debug
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/visa_tool.pyto interact with hardware instruments using VISA resource strings. - [EXTERNAL_DOWNLOADS]: The skill references
pyvisaandpyvisa-pyas dependencies, which are well-known and standard libraries for instrument automation and control. - [PROMPT_INJECTION]: The skill processes data received from external hardware instruments, which serves as a potential surface for indirect prompt injection.
- Ingestion points:
scripts/visa_tool.py(retrieves responses and raw data from instruments via SCPI queries). - Boundary markers: Absent.
- Capability inventory: Local file writing (CSV waveform data and PNG screenshots) and network-based communication with hardware instruments.
- Sanitization: Instrument responses are printed to output without specific sanitization or escaping.
Audit Metadata