ontoly-software-graph
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions provide standard commands to install the
ontolypackage from the NPM registry as a development dependency. - [COMMAND_EXECUTION]: The skill utilizes the
ontoly build .command to generate a software graph by performing local static analysis on the repository files. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository source code to provide insights, creating a surface for potential indirect prompt injection if the source code contains adversarial comments or metadata. 1. Ingestion points: Local source code files processed during the
ontoly buildexecution. 2. Boundary markers: The skill does not define explicit delimiters or instructions to ignore instructions embedded in the analyzed code. 3. Capability inventory: Includes shell command execution for graph generation and specialized query tools. 4. Sanitization: No specific filtering or sanitization of source code content is mentioned.
Audit Metadata