doca-upgrade
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill utilizes
sudofor administrative tasks, specifically for recovering interrupted package transactions withsudo dpkg --configure -aandsudo apt-get -f installas seen inSKILL.mdandTASKS.md. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for version detection (
pkg-config,doca_caps) and package management. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input regarding upgrade requests. Ingestion points: user prompts for version changes or status checks (SKILL.md). Boundary markers: explicit 'STOP and ask' instructions and 'never-auto-upgrade' rules (CAPABILITIES.md). Capability inventory: subprocess calls for sudo, apt-get, and dpkg (TASKS.md). Sanitization: absent, relying on human verification as the primary control gate.
Audit Metadata