re-automotive
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include fetching
can-utilsfrom the officiallinux-canGitHub repository and installing standard automotive security libraries such aspython-can,udsoncan,scapy, andcantoolsviapip. These are well-known and established tools within the automotive research community. - [COMMAND_EXECUTION]: The skill provides numerous shell commands for low-level network operations, including
modprobefor loading kernel modules,ip linkfor interface management, andcandump/cansendfor bus interaction. These are standard procedures for the described automotive analysis tasks. - [PRIVILEGE_ESCALATION]: The instructions utilize
sudoformodprobeandip linkcommands. This is a legitimate and necessary use of elevated privileges required to configure network interfaces and virtual CAN buses on Linux systems. - [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for ingesting and parsing external data from CAN bus traffic and UDS diagnostic responses.
- Ingestion points: CAN bus frames captured via
candumpand diagnostic responses received viaudsoncanin Python scripts. - Boundary markers: The instructions explicitly advise the use of virtual CAN (
vcan) interfaces for laboratory testing and emphasize physical isolation for real vehicle testing to prevent unintended consequences. - Capability inventory: The skill uses subprocess calls for
can-utils, file-writing for logging (candump -l), and network operations via SocketCAN. - Sanitization: The analysis relies on standard parsers like
cantoolsandudsoncanto interpret raw binary data based on predefined schemas (DBC files or UDS configs).
Audit Metadata