routeros-syntax-inspection
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides detailed recipes for interacting with RouterOS devices via REST and native APIs. This includes using the
/executeand/filemenus to handle script parsing. These operations are presented as necessary components of the skill's primary function—providing deep syntax inspection for network administrators. - [DYNAMIC_EXECUTION]: Instructions describe using the RouterOS
:parsecommand to dynamically lower scripts into an Intermediate Language (IL) for structural analysis. The skill provides guidelines on how to safely capture this output using temporary files to avoid string-escape collisions. - [INDIRECT_PROMPT_INJECTION]: The skill documentation addresses the risks associated with processing untrusted RouterOS scripts.
- Ingestion points: Untrusted data enters the agent context via console input strings and the contents of RouterOS script files read from the device.
- Boundary markers: The skill suggests static segmentation of input and uses the
:parseengine as a structural validator. - Capability inventory: The documented capabilities include file creation/deletion and script execution on the target RouterOS device.
- Sanitization: The skill recommends ASCII-normalization of input to prevent character offset desynchronization and provides a "sentinel decision rule" to distinguish between valid syntax and prospective candidates.
- [EXTERNAL_DOWNLOADS]: The skill references external documentation and research artifacts hosted on GitHub repositories owned by the author (tikoci/lsp-routeros-ts, tikoci/restraml, etc.). These links are provided as evidence for the described syntax behaviors and do not involve the installation of unverified software.
- [SAFE]: The skill includes "Known hazards" warnings, such as identifying specific keyword paths that can deadlock older versions of the RouterOS REST server, demonstrating a security-conscious approach to automation.
Audit Metadata