The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The script scripts/nextpcb_search.py performs network operations to www.eda.cn and smtapi.nextpcb.com to query electronic part data and stock information.
[CREDENTIALS_UNSAFE]: The nextpcb_search.py script contains hardcoded API authentication parameters, including an appid and a signature, used to authorize requests to the NextPCB SMT API.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external APIs which is then rendered in the terminal.
Ingestion points: API responses from eda.cn and nextpcb.com are parsed and displayed by scripts/nextpcb_search.py.
Boundary markers: Absent; part descriptions and metadata are rendered directly into a table.
Capability inventory: The script is limited to console output and network requests; it lacks capabilities for file system modification or subprocess execution that could be exploited via malicious API payloads.
Sanitization: Data from the API is displayed without explicit sanitization, though the impact is limited to the display interface.

hardware-design