ascendc-mssanitizer
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates Python test scripts (
gen_test_script.py) and C++ build configuration files (run_mssanitizer_geir.sh) at runtime to facilitate Ascend C operator testing.\n- [COMMAND_EXECUTION]: The execution scripts automate shell commands for compiling C++ test binaries (cmake,make) and invoking themssanitizerprofiler to analyze memory usage.\n- [INDIRECT_PROMPT_INJECTION]: The script generator ingen_test_script.pyinterpolates user-provided operator and fallback function names directly into Python source code templates, creating a potential surface for injection if malicious inputs are provided.\n - Ingestion points: User-supplied
--operatorand--fallbackarguments processed ingen_test_script.py.\n - Boundary markers: None identified; inputs are interpolated directly into code strings.\n
- Capability inventory: Subprocess execution of Python scripts, shell commands for build tools (cmake, make), and the vendor-specific profiling utility (mssanitizer).\n
- Sanitization: No validation or escaping is applied to the input strings during the template generation process.
Audit Metadata