atb-testframework-build
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied variables such as
<CANN_PATH>,<ATB_REPO_PATH>, and<DOCKER_NAME>which are directly interpolated into shell commands (e.g.,docker exec,source,cd). - Ingestion points: Path and container name variables provided by the user in response to skill prompts.
- Boundary markers: None present; the skill assumes valid input.
- Capability inventory: Full shell command execution via
bashanddocker execin theSKILL.mdinstructions. - Sanitization: No explicit sanitization or validation of the user-provided paths is performed before execution.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of third-party dependencies (nlohmann/json, googletest, pybind11, doxygen) and vendor-specific repositories from GitHub and GitCode mirrors.
- Evidence: Instructions use
git cloneandsedto point tohttps://gitcode.comandhttps://github.comfor library dependencies. - [COMMAND_EXECUTION]: The skill executes local build scripts and setup commands within a Docker environment.
- Evidence: Commands like
bash scripts/build.sh testframeworkandsource <CANN_PATH>/set_env.share core to the skill's functionality. - [DYNAMIC_CONTEXT_INJECTION]: The skill uses
PreToolUseandPostToolUsehooks to execute shell commands for environment validation and limiting compilation attempts. - Evidence: The
hookssection inSKILL.mdcontains shell scripts that run to verify the existence ofset_env.shand the repository directory.
Audit Metadata