doca-structured-tools-contract
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use standard system commands such as
lspci,ip,lsmod, andpkg-configto inventory hardware and software states related to the DOCA SDK.\n- [PRIVILEGE_ESCALATION]: The skill identifies that firmware inspection via theflinttool requiressudo. It includes a mitigation strategy that prevents silent privilege elevation by requiring explicit user consent or use of pre-approved channels.\n- [INDIRECT_PROMPT_INJECTION]: The skill handles potentially untrusted data from tool outputs and JSON files. It requires strict schema adherence and instructions to ignore unexpected fields, providing a defense against malformed or malicious data inputs.
Audit Metadata