openharmony-ut
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform network connectivity checks usingpingandnc, interact with device services via thehdctool, and execute local build scripts (./build.sh).- [DYNAMIC_EXECUTION]: The agent is instructed to generate C++ source code for unit tests, which is then compiled and executed on a target device. This is the primary function of the skill but involves runtime execution of binary content generated by the AI.- [INDIRECT_PROMPT_INJECTION]: The 'Automated Flow' logic inSKILL.mdandreferences/execution.mddirects the agent to read test output and modify source code to fix errors. This feedback loop is an indirect prompt injection surface where malformed test results could influence the agent's logic. Ingestion points: Test execution output viahdc shellcommands. Boundary markers: None identified to isolate external tool output from instructions. Capability inventory: Access toBash,Write, andEdittools. Sanitization: No validation or filtering of device output is mentioned before the agent processes it.
Audit Metadata