matlab-analyze-pcb-pdn

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface.
  • Ingestion points: The pcbFileRead function in SKILL.md and references/batch-analysis.md imports external PCB layout files (ODB++, Gerber, and Allegro).
  • Capability inventory: The agent uses evaluate_matlab_code (required in manifest.yaml) to execute generated MATLAB analysis scripts.
  • Sanitization: Regular expressions are used to filter and identify nets by name, providing basic data structure for net discovery.
  • Boundary markers: Data extracted from PCB files, such as net names, is interpolated into MATLAB code without explicit boundary delimiters or protective instructions.
  • [SAFE]: There is a unit consistency error in references/batch-analysis.md where PlatingThickness is set using SI units (35e-6), despite SKILL.md (Pitfall 6) stating the API requires inches (e.g., 0.002). This is a best practice violation and not a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 05:10 PM
Security Audit — agent-trust-hub — matlab-analyze-pcb-pdn