doca-bare-metal-deployment
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and parse external data from the RShim console buffer and system logs (e.g., journald, bfb-install output) to classify hardware states. This represents an indirect prompt injection surface if the external output were to contain adversarial instructions, although the skill mitigates this by providing specific status strings to match.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute a wide array of system-level shell commands for hardware discovery (
lspci,devlink), networking (ip link,ip route), and DPU management (bfb-install,mlxconfig,flint). These operations are consistent with the skill's primary purpose of hardware deployment. - [PRIVILEGE_ESCALATION]: The workflows described involve operations that require elevated privileges, such as binding PCIe drivers via sysfs, modifying systemd units, and executing
sudofor lifecycle management. These are documented as necessary steps for managing BlueField hardware directly.
Audit Metadata