Rdk X5 System

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 5:00 PM UTC
• Version: 1.0.0

Overview

This skill is a disclosed RDK X5 system-management guide that uses elevated commands for expected device administration tasks, with no evidence of hidden execution, exfiltration, or deception.

Install only if you administer an RDK X5 and want Codex guidance for privileged system changes. Review each sudo command before running it, avoid firmware or apt upgrades unless you intend them, and be careful with systemd enable because it makes a service start on boot.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (21)

Chaining Abuse

High

• Category: Tool Misuse

Content

### 3. OTA 在线升级

```bash
sudo apt update && sudo apt upgrade -y

# 升级 miniboot 固件到 NAND
sudo rdk-miniboot-update

• Confidence: 75% confidence
• Finding: Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Chaining Abuse

High

• Category: Tool Misuse

Content

cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_frequencies  # 可用频率

# 切换为性能模式（最高频率）
echo performance | sudo tee /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor
```

### 6. config.txt 配置

• Confidence: 75% confidence
• Finding: Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 2. 系统备份（生成可烧录镜像）

```bash
sudo rdk-backup
```
生成 `.img` 文件，可烧录到其他 SD 卡。确保有足够存储空间。eMMC 版本备份问题已在 v3.3.1 修复。

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Session Persistence

Medium

• Category: Rogue Agent

Content

```
```bash
sudo systemctl daemon-reload
sudo systemctl enable my-app.service
sudo systemctl start my-app.service
sudo systemctl status my-app.service
```

• Confidence: 80% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

| 系统无法启动 | miniboot 降级 | 只能重新烧录官方镜像 |
| 温度过高降频 | 无散热或负载过高 | 加装散热片/风扇；检查 BPU 使用率 |
| `rdk-backup` 失败 | 空间不足 | `df -h` 检查；清理 /tmp 或挂载外部存储 |
| `resize2fs` 无效 | 分区未扩展 | 先 `sudo growpart /dev/mmcblk0 2` 再 `resize2fs` |

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Context-Inappropriate Capability

Low

• Confidence: 76% confidence
• Finding: The manifest describes this skill as handling system configuration, backup/restore, firmware/kernel changes, autostart, storage expansion, and viewing version/log information. The added '桌面切换' capability changes the graphical desktop mode (CPU/GPU desktop), which is not mentioned in the declared scope and is not clearly justified by the listed system-management tasks.

Static analysis

No suspicious patterns detected.