fpga-development

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python scripts (scripts/fpga_fixture.py and scripts/test_fixture.py) that execute local FPGA tools such as Icarus Verilog and Yosys using the subprocess.run method. These operations are used to perform simulation and synthesis checks on local assets and are limited to specific, well-known development tools.
  • [DYNAMIC_EXECUTION]: The scripts generate temporary Yosys synthesis scripts and load local modules dynamically during testing. These actions follow standard software automation practices and do not involve executing code from remote or untrusted sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing HDL source files and implementation reports. To mitigate risks associated with untrusted design data, the skill mandates explicit design contracts and human-review templates that serve as functional boundaries. Evidence chain: The system processes local RTL files; boundary markers are present in the provided templates and exit criteria; capabilities include local tool execution via subprocess.run; sanitization is implemented for file paths in generated scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:39 AM