matlab-read-pcb-layout
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of MATLAB commands through the
evaluate_matlab_codetool to perform PCB data operations such asgerberRead,pcbFileRead, andcadnetList. - [INDIRECT_PROMPT_INJECTION]: The skill creates an ingestion surface for untrusted data by reading external PCB design files (e.g., Gerber, ODB++, Allegro) via functions like
pcbFileReadinSKILL.md. * Ingestion points:gerberReadandpcbFileReadfunctions process external files. * Boundary markers: None specified for the data contained within the PCB files. * Capability inventory:evaluate_matlab_code(manifest.yaml) allows execution of arbitrary MATLAB code, including system calls. * Sanitization: No explicit sanitization or validation of the data extracted from the PCB files is described before it is used in further commands. - [SAFE]: The process for setting up the Cadence
extractautility is handled securely by instructing the agent to query the current state and ask the user for the local executable path if needed, ensuring user oversight for external binary execution.
Audit Metadata