secure-boot-chain
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill contains C source code (signature_chain.c and wrong_database_use.c) that the agent is instructed to compile using gcc and execute locally to verify cryptographic models.
- [COMMAND_EXECUTION]: The skill requires the execution of various shell commands for code compilation and system diagnostics, including gcc, sbctl, mokutil, and efi-readvar.
- [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting data from the host system that may be controlled by an attacker, such as kernel logs or device metadata, which could be used to influence the agent's reasoning.
- Ingestion points: The skill ingests dmesg logs and the output of diagnostics tools like sbctl and mokutil from the host environment.
- Boundary markers: There are no explicit delimiters or instructions provided to separate system output from the agent's primary instructions.
- Capability inventory: The skill utilizes shell command execution, Python script execution, and C compilation/execution capabilities.
- Sanitization: The skill does not specify any sanitization or validation routines for external system data prior to processing.
Audit Metadata