build-platformio

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/platformio_builder.py executes the pio (PlatformIO) CLI to perform build and detection tasks. These calls use subprocess.run with list-based arguments, which is the recommended practice to prevent shell injection vulnerabilities. User-provided paths and environment names are validated or resolved to absolute paths before execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it parses platformio.ini files found in the project workspace. However, the risk is mitigated because the script uses the standard configparser library to extract specific, predefined keys (e.g., platform, board, framework) and does not evaluate arbitrary content from the file as instructions or code. Ingestion point: platformio.ini; Capability: CLI execution; Sanitization: Formal configuration parsing and list-based command assembly.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:28 AM