routeros-quickchr
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the @tikoci/quickchr package from the NPM registry and retrieves MikroTik CHR images for the virtual machines. These resources are fetched from established package registries and official vendor sources, aligning with the skill's core purpose.
- [COMMAND_EXECUTION]: The skill facilitates the execution of local shell commands via bunx to orchestrate virtual machines. It also provides the ChrInstance.exec method, allowing the agent to run CLI commands and scripts within the isolated guest RouterOS environment.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill processes RouterOS configuration files and scripts that may originate from untrusted external sources. 2. Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing user-supplied configurations. 3. Capability inventory: The skill provides extensive control over the guest VM, including CLI execution, REST API access, and file transfers. 4. Sanitization: No explicit input validation or sanitization routines are detailed for the commands passed into the VM.
Audit Metadata