junos-network
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
execute_junos_commandandexecute_junos_command_batchtools permit execution of arbitrary CLI commands on target network devices. \n- [COMMAND_EXECUTION]: Theload_and_commit_configtool allows pushing arbitrary configuration changes to a device's running configuration via NETCONF. \n- [CREDENTIALS_UNSAFE]: The skill manages sensitive authentication data including passwords and SSH private keys via a local JSON inventory file. While theget_router_listtool includes logic to filter these credentials from outputs, the storage and handling of these materials present an inherent risk surface. \n- [DYNAMIC_EXECUTION]: Therender_and_apply_j2_templatetool utilizes Jinja2 for dynamic configuration generation, which executes template logic at runtime based on provided variables. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted template and variable data that can influence device configuration. 1. Ingestion points:render_and_apply_j2_templateparameters inSKILL.md. 2. Boundary markers: Absent from the prompt interpolation logic. 3. Capability inventory: Remote command execution and configuration application on JunOS hardware. 4. Sanitization: Implements regex-based filters (block.cmdandblock.cfg) to prevent destructive commands and root credential modifications. \n- [EXTERNAL_DOWNLOADS]: Fetches the JunOS MCP server and required dependencies from Juniper's GitHub repository and official package registries.
Audit Metadata