kicad-board-edit
Pass
Audited by Gen Agent Trust Hub on Nov 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes KiCad board, project, and schematic files which could contain malicious instructions embedded in net names or metadata.\n- Ingestion points: The skill reads
.kicad_pcb,.kicad_pro, and.kicad_sch(via netlist export) files.\n- Boundary markers: No explicit delimiters or safety warnings are used to wrap data ingested from these files before processing by the agent.\n- Capability inventory: The skill can modify board files via thepcbnewAPI and execute system commands via the KiCad CLI.\n- Sanitization: Data is parsed using a combination of regex and the official KiCad Python API.\n- [COMMAND_EXECUTION]: The skill executes thekicad-clibinary throughsubprocess.run()to perform board synchronization and design rule checks.\n- The binary path is sourced from a configurable environment variableKICAD_CLIor common installation paths.\n- Commands are executed using a list of arguments, which prevents common shell injection attacks.
Audit Metadata