soc-integrate
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local script ('scripts/soc_integrate.py') using a list-based argument passing mechanism via the MCP runtime. This approach effectively prevents command injection risks.- [DATA_EXFILTRATION]: The skill's primary function involves reading RTL source files and writing generated Verilog modules, CSV reports, and JSON configurations. These file system operations are localized to the user's project environment and are consistent with the tool's documented purpose. No network exfiltration or unauthorized access to sensitive system files was detected.- [PROMPT_INJECTION]: The skill includes an indirect prompt injection surface because it parses external Verilog files. While the parser uses regular expressions to extract RTL structures rather than interpreting instructions, the agent should treat the resulting data as untrusted.
- Ingestion points: 'verilog_file' arguments in 'soc_integrate.py'.
- Boundary markers: Absent.
- Capability inventory: File-write operations and localized script execution.
- Sanitization: The tool extracts specific hardware definitions (ports, parameters) using regex patterns, which inherently filters out non-matching content.
Audit Metadata