workflow
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The scripts/workflow_runner.py script automates build and flash workflows by calling other local Python scripts through subprocess.run.
- [DYNAMIC_EXECUTION]: The orchestrator dynamically constructs command lists based on user-provided build systems and targets before execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user inputs that are passed to subprocesses, creating an attack surface for indirect injection.
- Ingestion points: CLI arguments such as --project, --target, and --artifact parsed in scripts/workflow_runner.py.
- Boundary markers: The skill does not employ delimiters or warnings to isolate untrusted data.
- Capability inventory: The skill can execute local scripts and capture their output using the subprocess module.
- Sanitization: The script uses list-based command arguments which prevent basic shell injection, but does not sanitize the semantic content or file paths of the inputs.
Audit Metadata