infrahub-converting-netbox-device-types
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile includes shell command placeholders (!find ...) to locate YAML schema and mapping files within the current directory. These commands are restricted to listing local files for agent context and do not process untrusted arguments. - [COMMAND_EXECUTION]: The intended workflow requires the agent to execute bundled Python scripts for data extraction and conversion, as well as standard development tools like
pip,git, andinfrahubctl. - [EXTERNAL_DOWNLOADS]: The skill fetches vendor device models from the official community-maintained
devicetype-libraryon GitHub. - [INDIRECT_PROMPT_INJECTION]: The conversion process ingests external YAML data from NetBox instances and public libraries.
- Ingestion points: Data is read by
netbox_to_infrahub_templates.pyand thematerialize_module_ports.pygenerator script. - Boundary markers: The skill instructs the agent to analyze coverage reports and explain data loss to the user, providing a verification step.
- Capability inventory: Scripts have the ability to read and write local files and communicate with configured NetBox and Infrahub API endpoints.
- Sanitization: The transformation logic is governed by structured mapping profiles that explicitly bind NetBox fields to Infrahub attributes, preventing untrusted data from directly influencing command execution or control flow.
Audit Metadata