doca-firefly
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides instructions to execute system-level commands with elevated privileges using sudo. Specifically, it recommends using sudo mlxconfig for firmware queries and sudo ovs-vsctl for network configuration checks within the TASKS.md file.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection because it ingests and processes untrusted external data while having the capability to execute high-privilege commands. 1. Ingestion points: Firefly container logs, output from the pmc utility, and chronyc status reports. 2. Boundary markers: Absent; there are no instructions to use delimiters or ignore embedded instructions when reading logs. 3. Capability inventory: High-privilege command execution via sudo for hardware and networking tools like mlxconfig, ovs-vsctl, and ethtool. 4. Sanitization: Absent; the skill lacks guidelines for sanitizing or validating log content before processing.
Audit Metadata