soc-build

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates Electronic Design Automation (EDA) workflows by executing shell commands via make and subprocess. This is the intended functionality to interface with external toolchains like VCS, Verilator, and SpyGlass.
  • [SAFE]: Input validation is performed at the MCP server level using regular expressions (e.g., HDL_IDENTIFIER_RE, TEST_NAME_RE) to ensure that user-provided arguments like module names and test cases do not contain malicious shell metacharacters before they are passed to shell execution.
  • [SAFE]: The inclusion of a hygiene script (check_repo_hygiene.py) acts as a security guardrail by scanning for absolute paths and license server strings to prevent sensitive environment details from being committed to the repository.
  • [SAFE]: The skill implements a integrity verification system using SHA256 fingerprints to ensure that source files remain unchanged during long-running simulation or synthesis tasks, providing a tamper-evident execution loop.
  • [SAFE]: Resource access is scoped through a dedicated MCP runtime and configuration files, reducing the risk of unauthorized system-wide operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 04:06 PM
Security Audit — agent-trust-hub — soc-build