asterisk-tester
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
docker execto run various commands inside the MikoPBX container, includingasterisk -rxfor dialplan management andsqlite3for database queries. These operations are necessary for the skill's stated purpose of testing PBX configurations. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources such as Asterisk logs (
/storage/usbdisk1/mikopbx/log/asterisk/verbose) and dialplan outputs. - Ingestion points: Reads log files using
tail -fand displays dialplan execution steps from the Asterisk CLI. - Boundary markers: None explicitly defined in the instructions to separate log content from agent instructions.
- Capability inventory: The agent can execute shell commands via
docker exec, read files, and originate calls. - Sanitization: No evidence of sanitization or escaping of log content before analysis.
Audit Metadata