serial-monitor
Warn
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/serial_monitor.pyusessubprocess.runto executeopenocdand allows arbitrary commands to be passed via the--openocd-commandflag. This could be abused if an agent populates this argument using untrusted input. - [PROMPT_INJECTION]: The skill processes serial data from external hardware, creating an indirect prompt injection surface. Ingestion points: Serial port input in
scripts/serial_monitor.py. Boundary markers: Absent; the agent is not provided with delimiters to distinguish data from instructions. Capability inventory: Subprocess execution ofopenocdand file writing. Sanitization: No validation or sanitization is performed on the serial data. - [EXTERNAL_DOWNLOADS]: The skill documentation directs users to install the
pyseriallibrary and theopenocdsystem utility using standard package managers.
Audit Metadata