ota-firmware-update
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains legitimate technical documentation for firmware update lifecycles, including image signing, delta generation, and cloud deployment. No malicious patterns such as prompt injection, obfuscation, or persistence mechanisms were found.
- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows that ingest untrusted external data, such as AWS IoT Job documents and manifest files, which could theoretically be used for indirect prompt injection. However, the skill provides extensive security best practices, including mandatory signature and hash verification, to secure the implementation.
- Ingestion points: Remote job documents (README.md), update manifests (SKILL.md), and cloud device twin properties (SKILL.md).
- Boundary markers: Not explicitly implemented in the provided code snippets.
- Capability inventory: Includes shell command execution (Bash) and file system access (Write, Edit) for building and deploying firmware (SKILL.md).
- Sanitization: Relies on cryptographic verification protocols (ECDSA, SHA-256) rather than input filtering.
Audit Metadata