openwrt-dev

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides extensive documentation and examples for executing shell commands relevant to OpenWrt management and development. This includes the use of uci for configuration, opkg for package management, and make for build system operations. These examples are consistent with the skill's stated purpose.
  • [PRIVILEGE_ESCALATION]: Documentation includes instructions for installing build dependencies using sudo on host systems and modifying kernel-level settings such as ptrace_scope for debugging. These actions are typical for setting up a development environment and performing low-level debugging.
  • [PERSISTENCE]: The skill guides users on creating persistence through standard OpenWrt mechanisms, specifically the creation of procd init scripts for service management and the use of cron for task scheduling. These are intended for legitimate software development.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains multiple prompts that take user-provided specifications to generate code, Makefiles, and configurations. This represents a vulnerability surface where maliciously crafted user input could influence the generated output, although the capabilities are within the scope of development tasks.
  • Ingestion points: User input captured via prompts in prompts/generate-package.md, prompts/generate-luci-app.md, and prompts/network-config.md.
  • Boundary markers: The templates use {{VARIABLE}} placeholders for interpolation but do not include explicit instructions for the agent to ignore embedded instructions in the user-provided variable values.
  • Capability inventory: The generated scripts and instructions involve file system writes, network configuration changes, and package installation commands.
  • Sanitization: There is no explicit sanitization logic provided in the templates for the user-supplied strings.
  • [EXTERNAL_DOWNLOADS]: The skill references downloads and source code synchronization from official OpenWrt infrastructure, including git.openwrt.org and its associated GitHub repositories. These are recognized as trusted sources for the OpenWrt ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 11:58 AM