visa-debug

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script scripts/visa_tool.py to interact with hardware instruments using VISA resource strings.
  • [EXTERNAL_DOWNLOADS]: The skill references pyvisa and pyvisa-py as dependencies, which are well-known and standard libraries for instrument automation and control.
  • [PROMPT_INJECTION]: The skill processes data received from external hardware instruments, which serves as a potential surface for indirect prompt injection.
  • Ingestion points: scripts/visa_tool.py (retrieves responses and raw data from instruments via SCPI queries).
  • Boundary markers: Absent.
  • Capability inventory: Local file writing (CSV waveform data and PNG screenshots) and network-based communication with hardware instruments.
  • Sanitization: Instrument responses are printed to output without specific sanitization or escaping.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 06:24 AM