skos-xl

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/sync.py utility downloads official SKOS and SKOS-XL RDF schemas from the W3C (World Wide Web Consortium) and example Turtle files from the Taxonomic Databases Working Group (TDWG) GitHub repository. These references target well-known, authoritative standards organizations in the web and scientific communities.
  • [COMMAND_EXECUTION]: The skill provides scripts for validating, converting, and generating RDF files using the standard Python rdflib parser. These scripts operate locally on provided data and do not invoke external shell commands or subprocesses with untrusted input.
  • [SAFE]: The skill's logic is designed to support biodiversity data standards (Darwin Core) and Traditional Knowledge principles (CARE and Nagoya Protocol), with behavior that is transparent and consistent with its documentation.
  • [SAFE]: The tool parses user-supplied RDF vocabularies, which represents an indirect prompt injection surface if malicious content is present in labels or definitions. However, the use of a formal RDF parser and the technical context of the tool render this risk minimal.
  • Ingestion points: scripts/validate.py, scripts/convert.py, scripts/generate.py.
  • Boundary markers: Not explicitly implemented in script output to the agent.
  • Capability inventory: File system read/write access for vocabulary management and network access for downloading official schemas.
  • Sanitization: Input data is structurally validated and parsed through the rdflib library before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 08:25 AM
Security Audit — agent-trust-hub — skos-xl