fw-release-gate
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell scripts and templates (e.g.,
ge-release-check.shandrelease-checklist.md) for verifying firmware artifacts. These scripts are intended for local execution to perform integrity checks (sha256sum), naming validation, and secret scanning. The scripts use standard Unix utilities and implement variable quoting to prevent common shell injection vulnerabilities.- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows that process external data such as firmware binaries and release notes. - Ingestion points: Firmware image files and
RELEASE_NOTES.mddocuments are processed by shell scripts (examples/ge-release-check/ge-release-check.sh). - Boundary markers: The provided scripts use quoted variables (e.g.,
"$IMG") to prevent command injection via malicious filenames. - Capability inventory: The scripts use
grep,find, andsha256sumto analyze file contents and metadata. - Sanitization: The scripts focus on diagnostic output (pass/fail) and do not pass content directly back to the LLM as instructions.- [SAFE]: The skill implements and teaches defensive security practices. It specifically instructs the agent to refuse requests to store private keys in CI/CD environment variables and emphasizes asymmetric signing over symmetric schemes for sensitive firmware. No malicious patterns, obfuscation, or exfiltration vectors were identified.
Audit Metadata