routeros-containers
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFENO_CODECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of RouterOS CLI commands for administrative tasks, such as configuring network interfaces, bridge networking, and firewall rules. These are standard management operations described in an educational context.
- [EXTERNAL_DOWNLOADS]: The documentation explains how to pull container images from well-known registries like Docker Hub, GitHub Container Registry (GHCR), and Quay. These downloads target trusted external services for legitimate container management.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a surface for indirect prompt injection via custom app store URLs and manual YAML configuration. 1. Ingestion: app-store-urls setting and YAML editors. 2. Boundary markers: None mentioned. 3. Capability inventory: Full container management on RouterOS. 4. Sanitization: Not documented. This is presented with clear security warnings regarding third-party content.
- [PRIVILEGE_ESCALATION]: The reference material explains the use of container privileges and device pass-through, which are necessary for specific services to interact with router hardware.
Audit Metadata