embedded-firmware-from-hardware

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill involves processing external data (MCU datasheets and manuals) which presents a surface for indirect prompt injection.
  • Ingestion points: The scripts/pdf_evidence.py utility reads user-provided PDF files in the cmd_info, cmd_extract, cmd_render, and cmd_contact functions.
  • Boundary markers: Absent. The skill instructions do not specify the use of delimiters or 'ignore' instructions for the extracted content.
  • Capability inventory: The agent has the ability to read and write files (PDF, TXT, PNG) and is instructed to execute the Keil UV4 build toolchain.
  • Sanitization: No content filtering is performed on the text content extracted from the PDF documents.
  • [COMMAND_EXECUTION]: The skill guides the agent to interact with the Keil C51/8051 development environment, including creating project files and running the UV4 executable to build and rebuild projects. This is standard behavior for embedded development tasks.
  • [EXTERNAL_DOWNLOADS]: The documentation and script comments reference the installation of pymupdf and pillow using the standard Python package manager (pip). These are reputable, well-known libraries from the official Python Package Index (PyPI).
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 12:35 AM