gnu-radio
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinRadioToMPD.start_mpd_streamto interact withmpcfor audio playback andos.mkfifoto create a named pipe for audio streaming. - [PRIVILEGE_ESCALATION]: The installation instructions include
sudo apt installandsudo make install, which are standard for installing system-level drivers and software like GNU Radio. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external RF signals (via SDR) and WebSocket data (in the Spectrum Analyzer example). This creates an ingestion surface where malformed or malicious data from external sources could potentially influence the agent's context if the outputs are interpreted as instructions.
- Ingestion points: SDR source (
osmosdr.source), WebSocket probes, and external files. - Boundary markers: None explicitly defined in the provided Python blocks.
- Capability inventory: File system writes (FIFO), subprocess execution (
mpc), and network operations (WebSocket output). - Sanitization: Basic JSON encoding is used for spectrum data, but raw signal metadata (tags) are processed without validation.
- [EXTERNAL_DOWNLOADS]: The skill references official source code downloads from
github.com/gnuradio/gnuradio.git, which is the primary repository for this well-known project.
Audit Metadata