JLC EDA Drawing

ReviewAudited by ClawScan on May 11, 2026.

Overview

This is a coherent EasyEDA/JLC EDA automation skill, but it uses a local bridge that can execute JavaScript and edit the currently connected EasyEDA project.

Install and run this only if you want an agent to edit EasyEDA/JLC EDA projects through your active client. Before use, open the correct project, keep important designs backed up, keep the bridge on localhost, and stop the bridge server when done.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may alter the currently connected EasyEDA project when performing design or drawing tasks.

Why it was flagged

The bridge exposes a general JavaScript execution path inside the EasyEDA client. This is central to the EDA automation purpose, but it can make real changes to the open design.

Skill content
`POST /execute` | `Execute JavaScript in the EasyEDA client`
Recommendation

Use it only on the intended EasyEDA window/project, keep backups for important designs, and ask the agent to confirm before destructive or broad changes.

What this means

Changes can be made under the user's EasyEDA session without a separate API key being declared.

Why it was flagged

Actions occur through the user's already running EasyEDA client, so the skill effectively operates with that client's current project/account permissions.

Skill content
`Bridge layer`: connect Codex to the running EasyEDA client.
Recommendation

Verify the active EasyEDA account, workspace, and project before asking the skill to draw or automate anything.

What this means

A local helper server may continue running after setup and can mediate commands to EasyEDA.

Why it was flagged

The setup documentation asks the user to run a bundled Node bridge server in a hidden window. This is disclosed and purpose-aligned, but it is local code execution.

Skill content
Start-Process -FilePath "node" -ArgumentList "scripts/bridge-server.mjs" ... -WindowStyle Hidden
Recommendation

Run the bridge only from a trusted copy of the skill, review logs if needed, and stop the process when finished.

What this means

Project details and execution results may flow through the local bridge between EasyEDA and the agent.

Why it was flagged

The bridge passes messages between the EasyEDA extension and the agent. The documentation discloses this, but users should treat the bridge as a trusted local communication channel.

Skill content
`WS /eda` | `EasyEDA extension connection`; `WS /agent` | `Agent connection`
Recommendation

Keep the bridge local, avoid exposing its port range to other machines, and close it when not in use.