re-iot-proto
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process and analyze data from external, untrusted IoT protocol sources, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: SKILL.md (processing network capture files via
tshark, subscribing to MQTT topics viamosquitto_sub, and reading BLE/NFC data). - Boundary markers: Absent. The instructions do not specify the use of delimiters or warnings to ignore embedded instructions within the processed data.
- Capability inventory: The skill utilizes subprocess calls to CLI tools such as
tshark,mosquitto_pub,coap-client, andubertooth-btleacross various operational steps. - Sanitization: Absent. No explicit sanitization or validation of the protocol data is described.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several security-related packages from official registries and the Python Package Index (PyPI).
- Evidence: Instructions include
pip install scapy,pip install aiocoap, andpip3 install killerbee. - [COMMAND_EXECUTION]: The skill provides numerous command-line examples for system configuration and protocol interaction.
- Evidence: Commands such as
sudo dpkg-reconfigure wireshark-common,sudo ./kb_install_firmware, and active protocol interactions likemosquitto_pubandcoap-clientare documented.
Audit Metadata