build-idf

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/idf_builder.py manages firmware builds by executing the standard idf.py toolchain. It uses subprocess.run with arguments passed as a list, which is a secure method that avoids shell interpretation and potential command injection vulnerabilities.
  • [SAFE]: The skill handles project-specific configuration data by reading local files such as sdkconfig and flasher_args.json. It uses strict regular expressions and JSON parsing to extract target information, ensuring that only expected values are processed. No signs of credential harvesting, remote code execution, or obfuscation were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 02:26 PM