yml2reg
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The MCP server executes a local Python script (
yml2reg.py) to perform the register file generation. While this is the core functionality, the script lacks sanitization of thenamefield within the input YAML file. A malicious YAML file could use directory traversal sequences (e.g.,../../) in the name field to force the tool to write Verilog output to locations outside the intended working directory. - [DATA_EXFILTRATION]: The script
scripts/yml2reg.pycallsgetpass.getuser()to retrieve the local environment's username and embeds it into the generated Verilog file header (Author : <user>). This results in the exposure of local system information in the generated artifacts. - [SAFE]: The skill uses
yaml.safe_load()to process user-provided YAML files, correctly preventing YAML-based code execution attacks.
Audit Metadata