esp-idf-components
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using official ESP-IDF tools, including idf.py and compote, to manage project components and manifests.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading components from the official ESP Component Registry (components.espressif.com) and Git repositories, which are standard and expected sources for ESP-IDF development.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where instructions could be embedded in external data. 1. Ingestion points: The skill reads external component manifests (idf_component.yml) and registry API responses (SKILL.md, references/component_manager.md). 2. Boundary markers: No explicit boundary markers or safety warnings for embedded instructions are present in the prompts. 3. Capability inventory: The skill uses idf.py and compote for shell command execution and file modification (SKILL.md). 4. Sanitization: No specific sanitization or filtering of external manifest content is described.
- [SAFE]: A binary index file (.idx) found in the template examples was analyzed and determined to be a standard artifact from the clangd language server, posing no security threat.
Audit Metadata