datasheet-reader
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute the
pcb scancommand. This is the primary mechanism for processing and converting technical documents into markdown. - [EXTERNAL_DOWNLOADS]: The
pcb scancommand accepts URLs as input, which results in the download and processing of external PDF files from remote servers. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted content (PDFs/URLs) which creates an indirect prompt injection surface. 1. Ingestion points: External document content ingested via the
pcb scantool (SKILL.md). 2. Boundary markers: The instructions do not define delimiters or provide 'ignore embedded instructions' warnings for the agent when reading the converted markdown. 3. Capability inventory: The agent is granted the ability to execute shell commands (pcb scan) and read the resulting files. 4. Sanitization: There is no mention of sanitization or safety filtering for the content extracted from the processed documents.
Audit Metadata