xiao-esp32s3
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the use of
arduino-cli core install esp32:esp32to download the ESP32 core, which is approximately 1 GB. This is a standard and necessary step for establishing the ESP32 development environment. - [CREDENTIALS_UNSAFE]: The example sketch
assets/sketches/09_softap_led/09_softap_led.inocontains a hardcoded WiFi password (12345678) for a local Access Point. This is intended for local hardware demonstration purposes and does not represent a sensitive service credential. - [PROMPT_INJECTION]: The skill reads external data from the board's serial port via
scripts/read_serial.ps1, which constitutes an indirect prompt injection surface where a connected hardware device can influence the agent's context. - Ingestion points:
scripts/read_serial.ps1reads line-by-line from the specified COM port. - Boundary markers: None; raw serial output is relayed directly to the console.
- Capability inventory: Subprocess execution of
arduino-clifor compilation and firmware flashing; execution of local PowerShell scripts for monitoring hardware state. - Sanitization: None; serial data is treated as plain text strings.
- [COMMAND_EXECUTION]: The skill utilizes
arduino-cliand PowerShell scripts (read_serial.ps1,watch_port.ps1) to manage the build lifecycle and communicate with the microcontroller hardware.
Audit Metadata