kicad-fab-export

Pass

Audited by Gen Agent Trust Hub on Nov 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses kicad-cli to perform board validation (DRC) and export fabrication files including Gerbers, drill files, STEP models, and DXF outlines.
  • [COMMAND_EXECUTION]: Employs standard shell utilities such as unzip, grep, and cp to manage fabrication templates and verify the contents of generated zip archives.
  • [EXTERNAL_DOWNLOADS]: Utilizes the uv tool (from Astral) to dynamically install and run the pygerber library, enabling the agent to render and inspect Gerber files for potential manufacturing defects.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests technical data from KiCad design files and tool outputs.
  • Ingestion points: board.kicad_pcb (SKILL.md), DRC reports (SKILL.md), and directory listings of unzipped archives (SKILL.md).
  • Boundary markers: No specific delimiters or "ignore" instructions are used around command outputs.
  • Capability inventory: Full access to kicad-cli, uv, and standard file manipulation tools.
  • Sanitization: The skill relies on specialized engineering tools to process these formats, which inherently limits the impact of text-based injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 15, 2026, 04:16 AM