accel-platform-install
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Moore Threads (mthreads.com) documentation, download portals, and their official GitHub repositories for obtaining SDK components and repository configurations.
- [COMMAND_EXECUTION]: It instructs the agent to use standard system inspection tools (lsb_release, uname, lspci, lsmod) to audit the host environment before installation. It also utilizes standard package management tools (dpkg-deb, pip) to extract and install software components into user-controlled directories.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential surface where the agent processes external data from vendor release notes and system command outputs. This vulnerability is assessed as low risk because the skill provides a specific, task-oriented validation ladder to verify system state after processing such data.
- [SAFE]: The instructions explicitly discourage dangerous practices such as reloading kernel drivers while jobs are active or modifying host-level package databases unnecessarily. It advocates for the principle of least privilege by using versioned user-space prefixes for binary installations.
Audit Metadata