doca-devemu
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill requires elevated privileges for hardware interaction and diagnostic procedures which is typical for this domain.
- Evidence:
TASKS.mdandCAPABILITIES.mdspecify that DPU-side process privileges (typicallysudo) are required for PCIe-level emulation and for executingdmesgto inspect host-side kernel logs. - [INDIRECT_PROMPT_INJECTION]: The workflow creates an indirect prompt injection surface as the agent is instructed to ingest and process outputs from external system commands.
- Ingestion points: Diagnostic steps in
TASKS.mdandCAPABILITIES.mdrely on the agent reading outputs fromlspci,dmesg, anddoca_caps. - Boundary markers: The instructions lack explicit guidance on using delimiters or ignoring instructions embedded within these external outputs.
- Capability inventory: The agent is guided to execute shell commands and modify build manifests based on the ingested data.
- Sanitization: No specific sanitization or validation of the command outputs is prescribed.
- [DYNAMIC_EXECUTION]: The skill guides the user through building and running compiled binaries which is the primary intent for library development.
- Evidence:
TASKS.mddefines workflows for compiling C/C++ source code usingpkg-configand executing the resulting DPU-side binaries for testing and operation.
Audit Metadata