kicad
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructions in references/workflows.md include the use of 'sudo apt install gerbv' which requires elevated administrative privileges to install system packages.
- [COMMAND_EXECUTION]: The skill employs shell commands such as find, grep, head, and kicad-cli across all files to manage hardware project files, search for component metadata, and run design rule checks.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection by processing external S-expression hardware files. 1. Ingestion points: KiCad schematic and PCB files are read in SKILL.md and references/workflows.md using grep and head. 2. Boundary markers: Absent; the skill does not define delimiters or instructions to ignore data-embedded commands. 3. Capability inventory: The skill is granted Bash, Edit, and Write tools in the SKILL.md frontmatter. 4. Sanitization: Absent; no validation or escaping of the design file content is performed.
Audit Metadata