openwrt-dev
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides extensive documentation and examples for executing shell commands relevant to OpenWrt management and development. This includes the use of
ucifor configuration,opkgfor package management, andmakefor build system operations. These examples are consistent with the skill's stated purpose. - [PRIVILEGE_ESCALATION]: Documentation includes instructions for installing build dependencies using
sudoon host systems and modifying kernel-level settings such asptrace_scopefor debugging. These actions are typical for setting up a development environment and performing low-level debugging. - [PERSISTENCE]: The skill guides users on creating persistence through standard OpenWrt mechanisms, specifically the creation of
procdinit scripts for service management and the use ofcronfor task scheduling. These are intended for legitimate software development. - [INDIRECT_PROMPT_INJECTION]: The skill contains multiple prompts that take user-provided specifications to generate code, Makefiles, and configurations. This represents a vulnerability surface where maliciously crafted user input could influence the generated output, although the capabilities are within the scope of development tasks.
- Ingestion points: User input captured via prompts in
prompts/generate-package.md,prompts/generate-luci-app.md, andprompts/network-config.md. - Boundary markers: The templates use
{{VARIABLE}}placeholders for interpolation but do not include explicit instructions for the agent to ignore embedded instructions in the user-provided variable values. - Capability inventory: The generated scripts and instructions involve file system writes, network configuration changes, and package installation commands.
- Sanitization: There is no explicit sanitization logic provided in the templates for the user-supplied strings.
- [EXTERNAL_DOWNLOADS]: The skill references downloads and source code synchronization from official OpenWrt infrastructure, including
git.openwrt.organd its associated GitHub repositories. These are recognized as trusted sources for the OpenWrt ecosystem.
Audit Metadata