build-platformio
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/platformio_builder.pyexecutes thepio(PlatformIO) CLI to perform build and detection tasks. These calls usesubprocess.runwith list-based arguments, which is the recommended practice to prevent shell injection vulnerabilities. User-provided paths and environment names are validated or resolved to absolute paths before execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it parsesplatformio.inifiles found in the project workspace. However, the risk is mitigated because the script uses the standardconfigparserlibrary to extract specific, predefined keys (e.g.,platform,board,framework) and does not evaluate arbitrary content from the file as instructions or code. Ingestion point:platformio.ini; Capability: CLI execution; Sanitization: Formal configuration parsing and list-based command assembly.
Audit Metadata