routeros-install-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with and references official MikroTik services for operational tasks.
- The script
scripts/check_latest_version.pyperforms HTTPS GET requests toupgrade.mikrotik.comto fetch the latest RouterOS version information. This is the official server used by RouterOS devices for the same purpose. - Documentation files reference downloads from
mikrotik.comanddownload.mikrotik.comfor system images, packages, and utilities like Netinstall and Rufus. - Installation procedures for cloud environments (e.g., Hetzner, Vultr) include commands such as
curl ... | funzip | dd ...which are standard methods for deploying raw disk images from official vendor sources. - [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface that processes information from external sources.
- Ingestion points: The
scripts/check_latest_version.pyscript reads version strings from the external URLhttps://upgrade.mikrotik.com/routeros/NEWESTa7.[channel]. - Boundary markers: The script uses a strict regular expression (
^(\d+)\.(\d+)(?:\.(\d+))?(?:(beta|rc)(\d+))?$) to validate and parse the incoming data. - Capability inventory: The script is read-only; it compares versions and prints the results to the terminal or JSON. It does not perform file writes, command execution, or network exfiltration based on the ingested content.
- Sanitization: The script decodes the response body using
asciiwith thereplaceerror handler and requires a successful match against the version regex before processing the data further.
Audit Metadata