se2-dev
Warn
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The preparation scripts (
GraphifyPrepare.bat,graphify_prepare.sh) are designed to download and install thegraphifyypackage and itsleidenextra from the Python Package Index (PyPI) usinguv,pipx, orpip. - [COMMAND_EXECUTION]: The skill utilizes several shell commands for system operations:
- It executes
uv,pipx, orpipfor package management and installation tasks. - It runs the
graphifycommand-line tool to perform code analysis and graph generation. - In
GraphifyPrepare.bat, a PowerShell command is executed with-ExecutionPolicy Bypassto calculate directory sizes and check free disk space. - The
graphify install --platformcommand in both batch and shell scripts interpolates theSE2_DEV_GRAPHIFY_PLATFORMenvironment variable or user input directly into a shell command, which may be susceptible to command injection if the input source is untrusted. - [REMOTE_CODE_EXECUTION]: The skill implements a pattern of downloading external code (from PyPI) and immediately executing it as part of the tool setup. Additionally,
graphify_check.shexecutes an inline Python script by piping a heredoc string to the Python interpreter to perform JSON validation. - [DATA_INGESTION]: The Graphify tool ingests and processes external codebases from
Data/DecompiledandData/Sources. This content is then used to answer natural language queries through thegraphify querycommand. - Ingestion points: Code files located in
Data/DecompiledandData/Sources. - Boundary markers: None identified; the tool processes the corpus without explicit delimiters or warnings to ignore embedded instructions.
- Capability inventory: Includes file system operations (
rmdir,rm -rf), package installation, and execution of thegraphifyCLI. - Sanitization: No explicit sanitization or filtering of the ingested code content is observed before graph construction or querying.
Audit Metadata