flydsl-kernel-trace-analysis

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the rocprof-trace-decoder installation script from the official ROCm repository on GitHub.
  • [REMOTE_CODE_EXECUTION]: Grants execution permissions and runs a shell script downloaded from an external URL to install necessary profiling components.
  • [PRIVILEGE_ESCALATION]: Modifies system library directories by copying .so files to /opt/rocm/lib/ and updates the dynamic linker cache using the ldconfig command.
  • [COMMAND_EXECUTION]: Executes user-provided commands passed via the <CMD> argument through rocprofv3 and the system shell for profiling purposes.
  • [INDIRECT_PROMPT_INJECTION]: Processes untrusted data from kernel statistics, PMC counters, and ATT trace files (CSV and JSON), which could allow malformed data to influence the agent's analysis or summary.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 07:41 AM