ble-protocol-stack
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and specifications from the official Bluetooth Special Interest Group (SIG) website (bluetooth.com) and technical articles from argenox.com, a well-known wireless technology resource. These are trusted sources for protocol implementation.
- [COMMAND_EXECUTION]: The skill includes a local utility script scripts/validate-schema.py to verify BLE configuration files. Technical review of the script confirms it only performs static analysis of JSON data using standard libraries and regular expressions, without network access or dangerous system calls.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined GATT schema files. This architectural pattern is common for development tools. The risk of indirect prompt injection is mitigated by the validate-schema.py script, which strictly validates all identifiers and UUIDs against the Bluetooth specification's expected formats before the agent uses the data.
- Ingestion points: User-provided gatt-schema.json file processed in Step 2.
- Boundary markers: Structural JSON keys and strict regex validation of values.
- Capability inventory: Protocol design guidance and static schema validation; no file system write or network capabilities.
- Sanitization: Input validation via re.fullmatch for all identifiers and UUIDs in scripts/validate-schema.py.
Audit Metadata