Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed PCB/EasyEDA assistant that uses local tooling for schematic work, with no evidence of hidden persistence, credential access, exfiltration, or destructive behavior.
Install this only if you intend to let an agent interact with your local EasyEDA setup. Review any schematic changes before fabrication, verify component availability and electrical assumptions yourself, and avoid using it if you cannot comfortably read the Chinese instructions and warnings.
The skill’s activation language is broad enough that generic requests like '执行核心功能' could trigger powerful behavior without clear scoping or confirmation. In a skill that has exec permission and can interact with a local EasyEDA bridge on localhost, ambiguous invocation increases the chance of unintended tool use, side effects, or overreach beyond the user’s precise intent.
Mandating fully Chinese interaction/output without user choice can cause misunderstanding of warnings, assumptions, or tool actions for users who do not read Chinese. In a skill that performs design actions and may invoke local tooling, reduced user comprehension can weaken informed consent and increase the risk of accidental approval of unsafe or incorrect operations.
