kicad-file-format
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents the structure of KiCad schematic and PCB files, which contain user-controlled text fields that could be exploited for indirect prompt injection.
- Ingestion points: The skill instructions involve reading and processing .kicad_sch and .kicad_pcb files.
- Boundary markers: No specific delimiters or instructions to ignore embedded strings are included in the format reference.
- Capability inventory: The skill is granted access to powerful tools like Bash, Write, and Edit, increasing the potential impact of a successful injection.
- Sanitization: The provided examples for parsing logic do not implement validation or sanitization of data extracted from the files.
Audit Metadata