openwrt-image-build
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official OpenWrt Image Builder toolset from the project's public release servers.
- Evidence:
SKILL.mdincludes instructions to download the Image Builder fromhttps://downloads.openwrt.org/releases/. This is a well-known and legitimate service for the OpenWrt project. - [COMMAND_EXECUTION]: Uses standard system utilities and build tools for firmware construction.
- Evidence: The skill automates the build process using
make image,tar, andzstd. It also usesddandptgento create partition images as shown in the build logs (examples/ge-ib-files-overlay/build-log.txt). These commands are used correctly within the context of image building and do not target sensitive system paths. - [INDIRECT_PROMPT_INJECTION]: Processes user-provided configuration files and file overlays, creating a surface for potential configuration injection.
- Ingestion points: Reads package lists from text files and merges directory trees specified by the
FILES=argument into the root filesystem. - Boundary markers: The documentation explicitly instructs on the required format for init scripts (
#!/bin/sh /etc/rc.common) and ensures idempotency inuci-defaultsscripts. - Capability inventory: Capabilities are limited to standard file manipulation and official OpenWrt build tools.
- Sanitization: Implements validation steps such as
make infoandmake manifestto confirm device profiles and package selections before execution, reducing the risk of accidental misconfiguration. - [DYNAMIC_EXECUTION]: Utilizes library preloading for permission simulation, which is a standard requirement for building OpenWrt images.
- Evidence: Build logs (
build-log.txt) show the use ofLD_PRELOADto loadlibfakeroot.so. This is the standard mechanism used by thefakerootutility to allow the creation of filesystems with root-owned files without requiring actual root privileges on the host.
Audit Metadata