openwrt-image-build

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official OpenWrt Image Builder toolset from the project's public release servers.
  • Evidence: SKILL.md includes instructions to download the Image Builder from https://downloads.openwrt.org/releases/. This is a well-known and legitimate service for the OpenWrt project.
  • [COMMAND_EXECUTION]: Uses standard system utilities and build tools for firmware construction.
  • Evidence: The skill automates the build process using make image, tar, and zstd. It also uses dd and ptgen to create partition images as shown in the build logs (examples/ge-ib-files-overlay/build-log.txt). These commands are used correctly within the context of image building and do not target sensitive system paths.
  • [INDIRECT_PROMPT_INJECTION]: Processes user-provided configuration files and file overlays, creating a surface for potential configuration injection.
  • Ingestion points: Reads package lists from text files and merges directory trees specified by the FILES= argument into the root filesystem.
  • Boundary markers: The documentation explicitly instructs on the required format for init scripts (#!/bin/sh /etc/rc.common) and ensures idempotency in uci-defaults scripts.
  • Capability inventory: Capabilities are limited to standard file manipulation and official OpenWrt build tools.
  • Sanitization: Implements validation steps such as make info and make manifest to confirm device profiles and package selections before execution, reducing the risk of accidental misconfiguration.
  • [DYNAMIC_EXECUTION]: Utilizes library preloading for permission simulation, which is a standard requirement for building OpenWrt images.
  • Evidence: Build logs (build-log.txt) show the use of LD_PRELOAD to load libfakeroot.so. This is the standard mechanism used by the fakeroot utility to allow the creation of filesystems with root-owned files without requiring actual root privileges on the host.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:43 AM