xiao-serial-monitor
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The 'flash.ps1' and 'mon.ps1' scripts execute 'arduino-cli' to compile sketches, upload firmware, and monitor board output. This is the core intended functionality of the skill and uses a well-known tool.
- [PROMPT_INJECTION]: The 'mon.ps1' script reads raw data from a serial port, which introduces an indirect prompt injection surface (Category 8c). A connected device could emit data that might be misinterpreted as instructions if an agent processes the serial output. 1. Ingestion points: 'mon.ps1' reads from COM ports using [System.IO.Ports.SerialPort]. 2. Boundary markers: None are present in the incoming data stream. 3. Capability inventory: The skill can execute local commands via 'arduino-cli' and PowerShell. 4. Sanitization: No filtering or escaping is applied to the serial data before it enters the context.
- [SAFE]: The documentation provides instructions for appending shortcuts to the user's PowerShell profile ($PROFILE). This is a standard and transparent method for environment setup and developer convenience.
Audit Metadata