exploiting-bgp-hijacking-vulnerabilities

Pass

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs the Containerlab simulation tool from the official site 'https://get.containerlab.dev'. It also interacts with the RIPEstat API at 'https://stat.ripe.net' to fetch BGP routing and RPKI status information.\n- [REMOTE_CODE_EXECUTION]: The workflow includes an installation command for Containerlab using a piped script: sudo bash -c "$(curl -sL https://get.containerlab.dev)". This is the documented installation method for this well-known network lab orchestration tool.\n- [REMOTE_CODE_EXECUTION]: In SKILL.md, a command pipes RIPEstat API output to python3 -m json.tool. This is used exclusively for pretty-printing JSON data for the user and does not execute arbitrary script code.\n- [COMMAND_EXECUTION]: The skill utilizes sudo for administrative tasks including tool installation and the deployment of network topologies. It also uses docker exec to configure and monitor virtual routing containers (FRRouting) within the simulation environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 10, 2026, 08:31 AM