build-idf
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/idf_builder.pymanages firmware builds by executing the standardidf.pytoolchain. It usessubprocess.runwith arguments passed as a list, which is a secure method that avoids shell interpretation and potential command injection vulnerabilities. - [SAFE]: The skill handles project-specific configuration data by reading local files such as
sdkconfigandflasher_args.json. It uses strict regular expressions and JSON parsing to extract target information, ensuring that only expected values are processed. No signs of credential harvesting, remote code execution, or obfuscation were identified.
Audit Metadata