dnf5
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents the handling of external repository metadata and the actions plugin, which constitutes a vulnerability surface for indirect prompt injection from untrusted repositories. However, this is inherent to the functionality of a package manager and the documentation correctly specifies mitigation via GPG verification.
- Ingestion points: Remote repository metadata (XML/zck files) described in references/caching.md and references/configuration.md.
- Boundary markers: The documentation emphasizes mandatory GPG signature verification (repo_gpgcheck, pkg_gpgcheck) to ensure metadata integrity.
- Capability inventory: The DNF5 tool possesses system-level privileges, file system access, and the ability to execute shell scripts via the actions plugin.
- Sanitization: Security is enforced through the RPM cryptographic trust model.
- [COMMAND_EXECUTION]: The documentation describes functional features that allow the execution of external shell commands, such as the libdnf5 actions plugin and the dnf5daemon D-Bus API. These are documented as standard administrative capabilities.
- [REMOTE_CODE_EXECUTION]: The build reference provides instructions for fetching the DNF5 source code from its official repository on GitHub for the purpose of building and testing.
Audit Metadata