openwrt-amlogic-remake
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the './remake' shell script to manage complex disk-level operations for operating system imaging. Evidence: Command sequences in 'ge-amlogic-n1-build.md' and instructions in 'SKILL.md' document the use of 'sudo ./remake'.
- [EXTERNAL_DOWNLOADS]: Fetches pipeline scripts, kernel archives, and system utilities from the 'ophub' organization's GitHub repositories. Evidence: 'SKILL.md' and 'references/kernel-lines.md' identify dependencies on repositories such as 'github.com/ophub/amlogic-s9xxx-openwrt' and 'github.com/ophub/kernel'.
- [REMOTE_CODE_EXECUTION]: Downloads and executes shell scripts from a third-party GitHub source as part of the primary build workflow. Evidence: The workflow includes cloning the 'amlogic-s9xxx-openwrt' repository and executing the 'remake' script.
- [PRIVILEGE_ESCALATION]: Explicitly requires execution with 'root' user privileges to enable system-level disk and partition management. Evidence: 'SKILL.md' (L1356) checks for 'id -u == 0' and 'ge-amlogic-n1-build.md' uses 'sudo' for core build commands.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes user-supplied 'rootfs.tar.gz' archives with high privileges, creating a surface for indirect instructions to be processed. Ingestion points: 'openwrt-armsr/*rootfs.tar.gz' input (SKILL.md). Boundary markers: No specific delimiters or safety warnings for embedded instructions in archives. Capability inventory: 'sudo', 'curl', 'git', 'dd', 'mount'. Sanitization: No sanitization of internal archive content is described.
Audit Metadata