serial
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
serial_mux.pyscript manages a background multi-plexing service by launching subprocesses. It usessys.executableto run a server instance of itself andsocatto create virtual PTYs for multi-client access. These operations are implemented using argument lists, avoiding shell injection risks. - [COMMAND_EXECUTION]: The
serial_mux.pyscript terminates background service processes (mux and socat) by reading PIDs from a local state file (.embeddedskills/state.json) during management commands. - [COMMAND_EXECUTION]: The
serial_log.pyscript enables the agent to write serial data to a file path specified via the--outputargument. This provides a general file-writing capability within the context of its logging functionality. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface.
- Ingestion points: Untrusted data enters the agent context through
serial_monitor.py,serial_hex.py, andserial_log.pywhich read directly from serial ports. - Boundary markers: Output is structured as JSON or JSON Lines, though the instructions do not explicitly warn the agent to ignore instructions embedded in the serial stream.
- Capability inventory: The skill includes subprocess management in
serial_mux.py, file-writing inserial_log.py, and serial data transmission inserial_send.py. - Sanitization: Serial data is decoded using replacement for invalid characters, but no semantic sanitization is applied to the content.
Audit Metadata