soc-openroad
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
soc_openroad_runtool executes the systemmakecommand to process physical design stages. The execution uses a structured list of arguments which mitigates the risk of shell injection attacks.- [SAFE]: The skill implements strict validation for hardware identifiers (design names, module names, and ports) using the regular expression[A-Za-z_][A-Za-z0-9_$]*, preventing unexpected character injection in generated files.- [SAFE]: The build stages passed to themakecommand are validated against a predefined whitelist (e.g., 'synth', 'floorplan', 'place'), ensuring only authorized targets can be executed.- [SAFE]: File operations for generatingconfig.mkandconstraint.sdcare limited to the project directory and follow established Electronic Design Automation (EDA) workflows. The tool usesshlex.splitfor safe parsing of project filelists.
Audit Metadata