isolapurr-user-operations
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches host tool installation scripts directly from the vendor's GitHub repository (github.com/IvanLi-CN/isolappurr-usb-hub).
- [REMOTE_CODE_EXECUTION]: Executes downloaded installer scripts via bash and PowerShell to set up the necessary command-line tools. The Windows installation command utilizes the -ExecutionPolicy Bypass flag to facilitate the setup process.
- [COMMAND_EXECUTION]: Uses the installed CLI tools to perform various system and hardware-level tasks, including managing Wi-Fi credentials, power settings, and firmware updates on connected devices.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by processing discovery, status, and diagnostic data from external hardware devices. Ingestion points: Hardware status and diagnostic data retrieved via the isolapurr status and diagnostics commands as described in SKILL.md. Boundary markers: No delimiters or ignore instructions are specified for hardware-sourced data. Capability inventory: Local command execution (bash/powershell), network operations (curl), and hardware configuration modification. Sanitization: No validation or escaping of strings returned from hardware devices is documented before the agent processes them.
Audit Metadata