zephyr-development

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill mentions the use of west update in references/workflow.md, which is the standard method for managing dependencies and downloading project modules in the Zephyr RTOS ecosystem. These downloads typically target official Zephyr Project repositories on GitHub.
  • [COMMAND_EXECUTION]: The instructions involve the use of the west meta-tool for building (west build), flashing (west flash), and debugging (west debug) firmware. This is standard developer workflow for embedded systems. The skill explicitly includes safety warnings regarding hardware interaction (e.g., inspecting reset behavior and voltage before sessions).
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze external data sources such as Devicetree files (zephyr.dts), Kconfig files (.config), and compiler output. While these files are externally controlled, they are standard build artifacts in the development process.
  • Ingestion points: The agent reads zephyr.dts, .config, ELF/map files, and compiler/linker output as described in SKILL.md.
  • Boundary markers: None explicitly provided in the instructions.
  • Capability inventory: The skill facilitates shell command execution via west for building and hardware interaction.
  • Sanitization: Not explicitly mentioned; the skill relies on standard Zephyr toolchain behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:31 PM