roofline-toolbox
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages and runs inference server processes (vLLM, SGLang, or custom Docker containers) as defined in local profile configuration files. The command execution is handled via
bash -cinscripts/serve.sh. - [DYNAMIC_EXECUTION]: Configuration profiles stored in the
profiles/directory are sourced as shell scripts inscripts/serve.shto initialize the environment and execution parameters for the inference server. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to interact with local or remote OpenAI-compatible API endpoints (defined by
INFER_URL) for monitoring, benchmarking, and health checks usingcurland Python'surlliblibrary. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external LLM API responses for metrics gathering and tool-calling validation, which presents a technical attack surface.
- Ingestion points: API responses from the configured
INFER_URLare processed inscripts/health.sh,scripts/bench.py,scripts/metrics.py, andscripts/smoke_toolcall.py. - Boundary markers: The skill relies on standard JSON structure for API responses rather than explicit natural language delimiters.
- Capability inventory: The skill possesses process management capabilities (via
serve.shandstop.sh) and broad network access for API interaction. - Sanitization: External content is parsed using standard Python JSON libraries (
json.load,json.loads), which provides basic protection against malformed or malicious payloads.
Audit Metadata