component-search
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly performs web component searches and an import flow ("pcb search -m web:components" and "pcb new component") that downloads symbols/footprints/STEP models and "scans the datasheet" from third-party sources (CSE, LCSC, DigiKey), so it ingests and acts on untrusted public web content as part of its required workflow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata