skos-xl
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/sync.pyutility downloads official SKOS and SKOS-XL RDF schemas from the W3C (World Wide Web Consortium) and example Turtle files from the Taxonomic Databases Working Group (TDWG) GitHub repository. These references target well-known, authoritative standards organizations in the web and scientific communities. - [COMMAND_EXECUTION]: The skill provides scripts for validating, converting, and generating RDF files using the standard Python
rdflibparser. These scripts operate locally on provided data and do not invoke external shell commands or subprocesses with untrusted input. - [SAFE]: The skill's logic is designed to support biodiversity data standards (Darwin Core) and Traditional Knowledge principles (CARE and Nagoya Protocol), with behavior that is transparent and consistent with its documentation.
- [SAFE]: The tool parses user-supplied RDF vocabularies, which represents an indirect prompt injection surface if malicious content is present in labels or definitions. However, the use of a formal RDF parser and the technical context of the tool render this risk minimal.
- Ingestion points:
scripts/validate.py,scripts/convert.py,scripts/generate.py. - Boundary markers: Not explicitly implemented in script output to the agent.
- Capability inventory: File system read/write access for vocabulary management and network access for downloading official schemas.
- Sanitization: Input data is structurally validated and parsed through the
rdfliblibrary before processing.
Audit Metadata