designing-hardware-products
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes a user-supplied 'product-brief' to drive the generation of system designs, firmware source code, PCB layouts, and mobile app logic. Ingestion points: The argument in SKILL.md. Boundary markers: None identified; no delimiters are used to separate user input from the system instructions. Capability inventory: The skill has access to Bash for build processes and Write/Edit for source code creation across multiple phases. Sanitization: No mechanisms for validating or escaping the user-provided brief are described.
- [EXTERNAL_DOWNLOADS]: The pipeline utilizes npx degit to scaffold mobile applications from the dcloudio repository, which is the well-known organization behind the UniApp framework. Evidence: npx degit dcloudio/uni-preset-vue#vite-ts app in references/pipeline-phases.md.
- [COMMAND_EXECUTION]: The skill employs standard shell commands for building firmware (idf.py), compiling mobile applications (npx uni), and modifying schematic files (sed). These operations are consistent with the intended purpose of the skill.
Audit Metadata