re-hardware-io
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to capture and analyze data from physical hardware devices, such as UART boot logs and Flash memory dumps. Maliciously crafted data from an external hardware source could contain instructions intended to influence or redirect the agent's reasoning process during analysis.
- Ingestion points: UART serial logs captured via
picocomandtee, and firmware images extracted viaflashromoropenocd(SKILL.md, references/commands.md). - Boundary markers: None identified. Data is processed as raw text or binary content.
- Capability inventory: The skill uses system shell commands for hardware interaction, package management, and file operations across all included files.
- Sanitization: No sanitization or validation of the captured log content or binary metadata is described before analysis.
- [COMMAND_EXECUTION]: The skill provides comprehensive instructions for executing system commands to install and run hardware utility tools including
openocd,picocom,flashrom, andsigrok-cli. These tools interact directly with system drivers and physical interfaces (references/commands.md). - [PRIVILEGE_ESCALATION]: The skill notes that
sudomay be required to run tools likepicocomif the user lacks permissions to access serial device nodes such as/dev/ttyUSB0(references/commands.md). - [EXTERNAL_DOWNLOADS]: The skill directs users to download and install software from various package managers (apt, dnf, pacman, brew, choco) and provides a command to clone the JTAGulator project from GitHub (SKILL.md).
Audit Metadata