board-support
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The resolution procedure instructs the agent to execute a local Python script using user-provided input in the command line: 'python3 ../../scripts/resolve_board_profile.py --query ""'. This practice creates a potential command injection vulnerability if the user input is not properly sanitized or validated.
- Ingestion points: User-supplied board names, revisions, or module suffixes entered during the query phase.
- Boundary markers: The command template uses double quotes around the placeholder, but the instructions lack explicit requirements for the agent to sanitize or escape shell-sensitive characters.
- Capability inventory: The skill allows for the execution of local scripts and the reading of configuration files from the filesystem.
- Sanitization: No validation or sanitization logic is specified for the input before it is used in the subprocess call.
Audit Metadata