esp32-development

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a defensive 'Operating contract' and 'Pre-response evidence gate' that require the agent to verify all hardware claims against authoritative sources (schematics, datasheets) before suggesting or executing commands.
  • [SAFE]: The provided script scripts/esp32-preflight.py is a benign diagnostic tool that uses Python standard libraries to identify host capabilities and serial port patterns without performing network requests or opening device ports.
  • [SAFE]: Instructions regarding sensitive data management (e.g., Wi-Fi credentials and OTA passwords) follow security best practices by using separate secrets files and environment variables, as seen in templates/esphome-secrets.yaml.example.
  • [SAFE]: External dependencies and toolchains referenced (such as ESP-IDF, PlatformIO, and MicroPython) are well-known, industry-standard tools from trusted organizations, and their use is consistent with the skill's primary purpose of embedded systems development.
  • [SAFE]: The skill explicitly advises against dangerous practices such as running tools as root or bypassing power-safety detectors, promoting a principle of least privilege and physical safety.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 01:04 PM