ascend-npu-driver-install

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill requires root privileges to perform system modifications, including driver installation, user management, and system reboot. It explicitly checks for root access using [ $EUID -ne 0 ] in the shell script.
  • [COMMAND_EXECUTION]: The skill identifies and executes binary .run packages based on filename patterns. It grants execution permissions (chmod +x) and runs these binaries with root privileges. This behavior is standard for hardware driver installers but relies on the integrity of the files in the provided directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided directory paths and usernames as arguments. These variables are used in shell commands within install_npu_driver.sh without proper sanitization or shell quoting, creating a potential path for command injection.
  • Ingestion points: The directory path ($1) and username ($2) arguments in scripts/install_npu_driver.sh.
  • Boundary markers: None present.
  • Capability inventory: Full root access, user/group creation (useradd/groupadd), package management (apt/yum), file permission modification (chmod), and binary execution.
  • Sanitization: No sanitization or escaping is performed on inputs before they are used in shell commands.
  • [EXTERNAL_DOWNLOADS]: The script uses system package managers (apt and yum) to download and install necessary build dependencies like gcc, make, and dkms from official OS repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 01:44 PM