platformio
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official installation script from the PlatformIO Core GitHub repository (raw.githubusercontent.com/platformio/platformio-core-installer/master/get-platformio.py).
- [REMOTE_CODE_EXECUTION]: Executes the downloaded
get-platformio.pyscript via Python to perform the initial platform installation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files that could contain instructions from external sources.
- Ingestion points: Reads configuration from
platformio.iniand source files insrc/andlib/. - Boundary markers: No specific delimiters are used to separate configuration data from instructions.
- Capability inventory: Includes shell command execution via the
Bashtool and library management viapio pkg install. - Sanitization: No sanitization is performed on project file contents, which is standard for local development tools.
- [DYNAMIC_EXECUTION]: Utilizes the
extra_scriptsfeature which executes project-local Python scripts during build operations, a standard feature of the PlatformIO ecosystem.
Audit Metadata