Audits FTC robot code and scripts for security vulnerabilities, credential leaks, and unsafe file operations.
The FTC Security Review skill provides a specialized auditing framework designed specifically for FIRST Tech Challenge (FTC) robotics projects. It automates the detection of sensitive data leaks such as WiFi credentials and API keys while enforcing best practices for file system access and code execution. By incorporating a built-in whitelist for standard FTC hardware IPs, it reduces false positives during reviews, allowing teams to ensure their code is secure, competition-ready, and free from common vulnerabilities like command injection or path traversal.
主要功能
01Automated detection of hardcoded credentials, API keys, and WiFi passwords.
022 GitHub stars
03FTC-specific IP address whitelisting for Control Hubs and Robot Controllers.
04Code injection prevention for dynamic execution (eval/exec) and shell commands.
05Path safety analysis to prevent absolute path usage and directory traversal.
06Hardware configuration auditing to ensure hardware map compliance over literals.
使用场景
01Auditing custom scripts and automation tools used within the FTC ecosystem for security flaws.
02Vetting robot code before pushing to public GitHub repositories to prevent credential leaks.
03Ensuring competition-compliant network and file configurations during the development lifecycle.
