可信 — 风险评分 0/100
上次扫描:1 天前 重新扫描
0 /100
Verilog Design Flow
Design, implement, and verify Verilog/SystemVerilog modules with spec-driven development, self-checking testbenches, and automated simulation workflows
Legitimate Verilog/SystemVerilog design and simulation workflow skill with no security concerns. All shell usage is documented EDA tool execution (VCS, Xrun, Icarus) and VCD analysis uses standard open-source library.
技能名称Verilog Design Flow
分析耗时31.7s
引擎pi
可以安装
This skill is safe to use. No security concerns identified.
资源类型声明权限推断权限状态证据
文件系统 READ READ ✓ 一致 SKILL.md declares file creation for .v/.sv files; scripts read VCD files
命令执行 WRITE WRITE ✓ 一致 SKILL.md:82-95 documents subprocess calls to vcs, xrun, iverilog; scripts/simula…
网络访问 NONE NONE No network activity detected
环境变量 NONE READ ✓ 一致 scripts/simulate.sh:26-29 uses 'command -v' for tool detection (safe)
凭据 NONE NONE No credential access found
敏感路径 NONE NONE No sensitive path access (~/.ssh, ~/.aws, .env)

目录结构

4 文件 · 19.0 KB · 641 行
Markdown 2f · 430L Shell 1f · 124L Python 1f · 87L
├─ 📁 references
│ └─ 📝 vcd-analysis.md Markdown 93L · 1.9 KB
├─ 📁 scripts
│ ├─ 🐍 check_vcd.py Python 87L · 2.6 KB
│ └─ 🔧 simulate.sh Shell 124L · 3.6 KB
└─ 📝 SKILL.md Markdown 337L · 10.9 KB

依赖分析 1 项

包名版本来源已知漏洞备注
vcdvcd * pip Open-source VCD parser library; version not pinned but no known vulnerabilities

安全亮点

✓ All shell execution is explicitly documented in SKILL.md (VCS, Xrun, Icarus commands)
✓ No credential harvesting or environment variable iteration
✓ No network exfiltration or C2 communication
✓ No obfuscation (base64, eval, atob)
✓ No sensitive file/path access
✓ Uses legitimate open-source EDA tools (Icarus Verilog, slang)
✓ VCD analysis uses well-known open-source Python library (vcdvcd)
✓ No remote script execution (curl|bash, wget|sh)
✓ No supply chain risks - no external dependencies beyond documented pip install