xiao-esp32s3

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the use of arduino-cli core install esp32:esp32 to download the ESP32 core, which is approximately 1 GB. This is a standard and necessary step for establishing the ESP32 development environment.
  • [CREDENTIALS_UNSAFE]: The example sketch assets/sketches/09_softap_led/09_softap_led.ino contains a hardcoded WiFi password (12345678) for a local Access Point. This is intended for local hardware demonstration purposes and does not represent a sensitive service credential.
  • [PROMPT_INJECTION]: The skill reads external data from the board's serial port via scripts/read_serial.ps1, which constitutes an indirect prompt injection surface where a connected hardware device can influence the agent's context.
  • Ingestion points: scripts/read_serial.ps1 reads line-by-line from the specified COM port.
  • Boundary markers: None; raw serial output is relayed directly to the console.
  • Capability inventory: Subprocess execution of arduino-cli for compilation and firmware flashing; execution of local PowerShell scripts for monitoring hardware state.
  • Sanitization: None; serial data is treated as plain text strings.
  • [COMMAND_EXECUTION]: The skill utilizes arduino-cli and PowerShell scripts (read_serial.ps1, watch_port.ps1) to manage the build lifecycle and communicate with the microcontroller hardware.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 02:00 AM
Security Audit — agent-trust-hub — xiao-esp32s3