doca-aes-gcm
Warn
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides instructions that involve executing commands with root privileges. The Command Appendix in
TASKS.mdsuggests usingsudo dmesg | tail -n 40to inspect kernel logs for driver-level troubleshooting. - [COMMAND_EXECUTION]: The skill workflow requires the execution of multiple shell commands. These include
pkg-configfor retrieving compilation and linking flags,doca_capsfor querying hardware device capabilities, and executing user-compiled binaries during the testing phase. - [INDIRECT_PROMPT_INJECTION]: The skill includes instructions for handling and analyzing external data in the form of cryptographic payloads.
- Ingestion points: The skill facilitates the processing of ciphertext and Additional Authenticated Data (AAD) through the
doca_aes_gcm_task_decrypttask. - Boundary markers: Documentation explicitly defines the authentication tag as a security boundary and instructs the agent to treat verification failures as a critical security signal (poisoned output).
- Capability inventory: The agent has the capability to execute build tools (via
pkg-config), perform hardware capability queries (viadoca_caps), and read system diagnostics. - Sanitization: The security model relies on the underlying cryptographic library's tag verification mechanisms rather than input sanitization or escaping within the agent instructions.
Audit Metadata