flash-keil
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script scripts/keil_flasher.py invokes the Keil MDK command-line interface (UV4.exe) using subprocess.run. The command targets a specific project and build target, and the binary path is either detected from the environment or provided as a parameter.
- [DYNAMIC_EXECUTION]: The script scripts/keil_flasher.py modifies the Python search path (sys.path) at runtime to import shared components from relative directories within the repository. This is used to access vendor-provided utilities for configuration and project parsing.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, specifically Keil project files (.uvprojx) and build logs. An attacker-controlled file could potentially embed instructions aimed at the agent.
- Ingestion points: Project XML parsing and log file reading in scripts/keil_flasher.py.
- Boundary markers: None present to isolate data from instructions.
- Capability inventory: Ability to execute the Keil CLI tool and write to a local profile configuration.
- Sanitization: Uses standard XML parsing and basic string search in logs.
Audit Metadata