ascend-npu-driver-install
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill requires root privileges to perform system modifications, including driver installation, user management, and system reboot. It explicitly checks for root access using
[ $EUID -ne 0 ]in the shell script. - [COMMAND_EXECUTION]: The skill identifies and executes binary
.runpackages based on filename patterns. It grants execution permissions (chmod +x) and runs these binaries with root privileges. This behavior is standard for hardware driver installers but relies on the integrity of the files in the provided directory. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided directory paths and usernames as arguments. These variables are used in shell commands within
install_npu_driver.shwithout proper sanitization or shell quoting, creating a potential path for command injection. - Ingestion points: The directory path (
$1) and username ($2) arguments inscripts/install_npu_driver.sh. - Boundary markers: None present.
- Capability inventory: Full root access, user/group creation (
useradd/groupadd), package management (apt/yum), file permission modification (chmod), and binary execution. - Sanitization: No sanitization or escaping is performed on inputs before they are used in shell commands.
- [EXTERNAL_DOWNLOADS]: The script uses system package managers (
aptandyum) to download and install necessary build dependencies likegcc,make, anddkmsfrom official OS repositories.
Audit Metadata