soc-openroad

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The soc_openroad_run tool executes the system make command to process physical design stages. The execution uses a structured list of arguments which mitigates the risk of shell injection attacks.- [SAFE]: The skill implements strict validation for hardware identifiers (design names, module names, and ports) using the regular expression [A-Za-z_][A-Za-z0-9_$]*, preventing unexpected character injection in generated files.- [SAFE]: The build stages passed to the make command are validated against a predefined whitelist (e.g., 'synth', 'floorplan', 'place'), ensuring only authorized targets can be executed.- [SAFE]: File operations for generating config.mk and constraint.sdc are limited to the project directory and follow established Electronic Design Automation (EDA) workflows. The tool uses shlex.split for safe parsing of project filelists.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 04:53 PM
Security Audit — agent-trust-hub — soc-openroad