robot-bringup
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates and shell scripts that execute privileged system commands, including the use of
sudofor managing firewalls (ufw), network configurations (netplan), and system services (systemctl). Additionally, theTopicWaiterclass inSKILL.mdusesimportlib.import_modulefor dynamic loading of message types at runtime. - [REMOTE_CODE_EXECUTION]: The
deploy-to-robot.shandssh-ros2-tunnel.shscripts inSKILL.mdimplement remote command execution patterns usingsshandrsyncto manage and update software on remote robot hardware. - [PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection through the ingestion of external telemetry and configuration data.
- Ingestion points: Data enters the context via
DiagnosticArrayandBooltopic subscriptions inwatchdog_node.pyandheartbeat_monitor.py, as well as through user-defined parameters inbringup.launch.py(all withinSKILL.md). - Boundary markers: Absent; the skill does not implement delimiters or safety instructions to distinguish data from instructions in these streams.
- Capability inventory: The skill scripts in
SKILL.mdhave the capability to execute shell commands, modify system configuration files, and send control signals to robot actuators. - Sanitization: Absent; the skill performs logical checks on data values but does not sanitize string content before logging or processing.
- [SAFE]: The skill references established services, such as Google Public DNS (
8.8.8.8), within its network configuration templates.
Audit Metadata