mosquitto
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes
systemctlfor managing the Mosquitto service andufwfor firewall configuration to allow traffic on standard MQTT ports (1883, 8883, 9001).\n- [COMMAND_EXECUTION]: Provides command templates formosquitto_pub,mosquitto_sub, andmosquitto_passwdto facilitate broker interaction and authentication management.\n- [EXTERNAL_DOWNLOADS]: References software installation through official Linux distribution package managers (apt,dnf) and standard language-specific registries for thepaho-mqttPython package andmqttNode.js package.\n- [PROMPT_INJECTION]: Identifies an indirect prompt injection surface due to the processing of untrusted MQTT message payloads.\n - Ingestion points: MQTT message payloads used in
mosquitto_pubarguments or received viamosquitto_sub.\n - Boundary markers: None defined within the command templates provided.\n
- Capability inventory: High-privilege actions including service control, firewall adjustments, and credential management.\n
- Sanitization: No explicit content filtering or escaping of message data is documented.
Audit Metadata