mikrotik-routeros-rsc
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of a local Python script
scripts/lint_rsc.pyto perform heuristic analysis on RouterOS scripts. The script is benign, relying on standard Python libraries to perform regex-based static analysis without network access or sensitive file interaction. - [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided RouterOS configuration files, which presents a surface for potential indirect prompt injection if those files contain malicious instructions hidden in comments.
- Ingestion points: RouterOS
.rscfiles provided by the user and processed by the agent or thelint_rsc.pyscript. - Boundary markers: The skill workflow explicitly requires validation via a linter and encourages the use of
dry-runand error-handling blocks to isolate execution risks. - Capability inventory: The agent has the capability to write files, execute the local linter via subprocess, and suggest RouterOS CLI commands.
- Sanitization: The
lint_rsc.pyutility implements heuristic checks to flag destructive commands (e.g., system resets), unconditional bulk deletions, and excessive policy grants. - [EXTERNAL_DOWNLOADS]: The documentation and example files (
references/EXAMPLES.md) reference fetching remote scripts fromhttps://example.com/config.rsc. This is provided as an educational example for the RouterOS/tool fetchcommand and targets a reserved documentation domain.
Audit Metadata