doca-telemetry-traceback-application
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill requires root privileges to function, as documented in
SKILL.mdandTASKS.md. It explicitly instructs the agent to usesudofor execution (sudo doca_telemetry_traceback) to access hardware-level telemetry data on BlueField DPUs or ConnectX NICs. - [DYNAMIC_EXECUTION]: The skill involves runtime compilation of source code.
TASKS.mdprovides instructions for usingmesonandninjato build the application from source located at/opt/mellanox/doca/applications/telemetry/traceback/before execution. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data via user-defined JSON configuration files (
rules.json). - Ingestion points: The application reads parameters like
data-idsandrulesfrom a JSON file specified by the-ror--rulesflag (documented inTASKS.md). - Boundary markers: The instructions in
TASKS.md ## configurestep 7 advise the agent to pre-validate inputs (e.g.,data_idformat,comparison_typevalues), but explicit LLM-level boundary markers for the data content are not defined. - Capability inventory: The skill executes shell commands with
sudoand PCIe address parameters. - Sanitization: Validation steps are mentioned for data formats, but not for preventing malicious instructions embedded in friendly name strings or other JSON fields.
Audit Metadata