podkop-openwrt-guide
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes remote domain and subnet lists from external community sources, creating a potential attack surface for indirect instructions.
- Ingestion points: Remote lists specified in
remote_domain_listsandremote_subnet_lists(referenced inreferences/operations.md). - Boundary markers: The skill includes a 'Safety Note' in
SKILL.mdexplicitly stating that remote domain/subnet lists and community data should not be considered automatically trusted. - Capability inventory: The orchestration tool manages core system networking including
sing-box,dnsmasq, andnftables, and performs shell-based configuration (referenced inreferences/operations.mdandreferences/repo-map.md). - Sanitization: The documentation notes that proxy strings and inputs are validated by the frontend and shell-based backend helpers (
references/proxy-strings.md).- [EXTERNAL_DOWNLOADS]: The guide provides instructions to download and execute an installation script and a configuration file from an external repository. - Evidence:
references/operations.mddescribes fetchinginstall.shandpodkop.configfromraw.githubusercontent.com/itdoginfo/podkop/usingcurl.- [COMMAND_EXECUTION]: The skill requires the execution of multiple system commands to manage the router's configuration and service lifecycle. - Evidence:
references/operations.mddetails the use of commands likepodkop start,podkop reload, andpodkop global_checkto control system-level routing services.
Audit Metadata