skills/plurigrid/asi/gnu-radio/Gen Agent Trust Hub

gnu-radio

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in RadioToMPD.start_mpd_stream to interact with mpc for audio playback and os.mkfifo to create a named pipe for audio streaming.
  • [PRIVILEGE_ESCALATION]: The installation instructions include sudo apt install and sudo make install, which are standard for installing system-level drivers and software like GNU Radio.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external RF signals (via SDR) and WebSocket data (in the Spectrum Analyzer example). This creates an ingestion surface where malformed or malicious data from external sources could potentially influence the agent's context if the outputs are interpreted as instructions.
  • Ingestion points: SDR source (osmosdr.source), WebSocket probes, and external files.
  • Boundary markers: None explicitly defined in the provided Python blocks.
  • Capability inventory: File system writes (FIFO), subprocess execution (mpc), and network operations (WebSocket output).
  • Sanitization: Basic JSON encoding is used for spectrum data, but raw signal metadata (tags) are processed without validation.
  • [EXTERNAL_DOWNLOADS]: The skill references official source code downloads from github.com/gnuradio/gnuradio.git, which is the primary repository for this well-known project.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 06:44 PM