skills/mukul975/anthropic-cybersecurity-skills/validating-tpm-measured-boot-attestation/Gen Agent Trust Hub
validating-tpm-measured-boot-attestation
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyscript uses thesubprocessmodule to executetpm2-toolsbinaries for reading PCRs, replaying event logs, and generating attestation quotes. Evidence: Therunfunction inscripts/agent.pyexecutes commands liketpm2_pcrread,tpm2_eventlog, andtpm2_quoteto interact with system hardware. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the system's TPM event log and tool outputs, which constitutes an ingestion point for potentially untrusted data. 1. Ingestion points: Data is read from
/sys/kernel/security/tpm0/binary_bios_measurementsand captured from CLI tool output inscripts/agent.py. 2. Boundary markers: The skill does not implement explicit boundary markers to isolate processed system data from the agent's internal instructions. 3. Capability inventory: The skill has capabilities for subprocess execution (subprocess.run) and file writing (Path.write_text) inscripts/agent.py. 4. Sanitization: Output from system tools is parsed using regular expressions to extract specific hexadecimal values before being included in reports.
Audit Metadata