routeros-install-upgrade

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill interacts with and references official MikroTik services for operational tasks.
  • The script scripts/check_latest_version.py performs HTTPS GET requests to upgrade.mikrotik.com to fetch the latest RouterOS version information. This is the official server used by RouterOS devices for the same purpose.
  • Documentation files reference downloads from mikrotik.com and download.mikrotik.com for system images, packages, and utilities like Netinstall and Rufus.
  • Installation procedures for cloud environments (e.g., Hetzner, Vultr) include commands such as curl ... | funzip | dd ... which are standard methods for deploying raw disk images from official vendor sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface that processes information from external sources.
  • Ingestion points: The scripts/check_latest_version.py script reads version strings from the external URL https://upgrade.mikrotik.com/routeros/NEWESTa7.[channel].
  • Boundary markers: The script uses a strict regular expression (^(\d+)\.(\d+)(?:\.(\d+))?(?:(beta|rc)(\d+))?$) to validate and parse the incoming data.
  • Capability inventory: The script is read-only; it compares versions and prints the results to the terminal or JSON. It does not perform file writes, command execution, or network exfiltration based on the ingested content.
  • Sanitization: The script decodes the response body using ascii with the replace error handler and requires a successful match against the version regex before processing the data further.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 04:40 PM