routeros-qemu-chr
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches version metadata and RouterOS image files from authoritative MikroTik domains, including upgrade.mikrotik.com and download.mikrotik.com. It also references specialized repackaged images and repositories (fat-chr, mikrotik-gpl) hosted on the author's GitHub account.
- [COMMAND_EXECUTION]: Utilizes shell commands and Bun's native process spawning (Bun.spawn) to initialize QEMU instances, detect system acceleration support (KVM/HVF), and perform health status checks on the guest router via local network probes.
- [PRIVILEGE_ESCALATION]: The GitHub Actions integration guide includes instructions to use
sudofor system package installation and udev rule configuration. These actions are restricted to the CI runner environment and are necessary for enabling hardware-accelerated virtualization (KVM).
Audit Metadata