embedded-firmware-from-hardware
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill involves processing external data (MCU datasheets and manuals) which presents a surface for indirect prompt injection.
- Ingestion points: The
scripts/pdf_evidence.pyutility reads user-provided PDF files in thecmd_info,cmd_extract,cmd_render, andcmd_contactfunctions. - Boundary markers: Absent. The skill instructions do not specify the use of delimiters or 'ignore' instructions for the extracted content.
- Capability inventory: The agent has the ability to read and write files (PDF, TXT, PNG) and is instructed to execute the Keil UV4 build toolchain.
- Sanitization: No content filtering is performed on the text content extracted from the PDF documents.
- [COMMAND_EXECUTION]: The skill guides the agent to interact with the Keil C51/8051 development environment, including creating project files and running the
UV4executable to build and rebuild projects. This is standard behavior for embedded development tasks. - [EXTERNAL_DOWNLOADS]: The documentation and script comments reference the installation of
pymupdfandpillowusing the standard Python package manager (pip). These are reputable, well-known libraries from the official Python Package Index (PyPI).
Audit Metadata