braiins-toolbox
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill enables the execution of shell commands and scripts on Bitcoin mining hardware to facilitate remote management and troubleshooting as described in the system management documentation.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of Braiins OS firmware from official subdomains, such as e5a33065.bos.braiins.com, which is required for the tool's primary functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect injection as it ingests data from external files (IP lists, pool configurations, and scripts) and reads status information from network-connected mining devices.
- Ingestion points: The skill reads IP ranges from files via the --ip-file flag (references/network-scan.md), pool configurations via --url-file (references/miner-management.md), and shell scripts via --script (references/system-management.md).
- Boundary markers: The documentation does not specify the use of delimiters or warnings to ignore embedded instructions within these external files or device responses.
- Capability inventory: The skill includes high-privilege capabilities such as 'system execute' for arbitrary shell command execution and 'firmware install' for operating system replacement on target hardware.
- Sanitization: No explicit sanitization or validation routines for external file contents or device-returned strings are documented.
Audit Metadata