kicad-library
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external KiCad library files which serves as an ingestion surface for untrusted data. (1) Ingestion points: Symbol (.kicad_sym) and footprint (.kicad_mod) files located in the project directory. (2) Boundary markers: The skill does not explicitly define delimiters for untrusted CAD content. (3) Capability inventory: The agent executes shell commands for library management (kicad-cli) and image processing (rsvg-convert). (4) Sanitization: Content extraction is performed via targeted regular expressions in the bundled Python scripts.
- [EXTERNAL_DOWNLOADS]: The skill instructions recommend the installation of the librsvg utility via official system package managers (brew, apt). These references target trusted, well-known software repositories.
- [COMMAND_EXECUTION]: The skill utilizes standard EDA command-line utilities (kicad-cli) and local Python scripts for geometry and connectivity validation, which is consistent with its stated purpose of electronic design automation.
Audit Metadata