skills/ndpvt-web/arxiv-claude-skills/pcbschemagen-constraint-guided-schematic-design/Gen Agent Trust Hub
pcbschemagen-constraint-guided-schematic-design
Warn
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill instructs the agent to generate Python code using the SKiDL library and then execute it within the local environment to validate syntax and circuit connectivity. This runtime execution of dynamically generated code is a primary capability of the skill and poses inherent security risks.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted natural language circuit descriptions to drive code generation. 1. Ingestion points: Natural-language circuit requirements provided by the user (SKILL.md). 2. Boundary markers: Absent; there are no instructions to use delimiters or ignore instructions within the user-provided text. 3. Capability inventory: Python execution (subprocess/exec) and file system access for KiCad export. 4. Sanitization: Absent; the validation focuses on circuit logic (VF2 isomorphism) rather than securing the generated code against malicious patterns.
- [EXTERNAL_DOWNLOADS]: The skill references the external Python library 'skidl' as a requirement and provides a link to a non-vendor GitHub repository (github.com/HZou9/PCBSchemaGen) for the reference implementation.
- [COMMAND_EXECUTION]: The syntax validation and circuit verification steps require the execution of Python scripts and shell-based tools to process netlists and graphs.
Audit Metadata