knowledge-graph-hardened
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it ingests and processes user-supplied text that is stored and later rendered back into the agent's context through entity summaries.\n
- Ingestion points: The
addandsupersedecommands inscripts/kg.pytake user-provided fact strings and store them initems.json.\n - Boundary markers: Facts are interpolated directly into the
summary.mdfile without delimiters, isolation blocks, or warnings to ignore embedded instructions.\n - Capability inventory: The skill utilizes
scripts/kg.pyto write facts and summaries to the local filesystem; the agent is instructed to perform these updates based on conversational input.\n - Sanitization: No sanitization, validation, or escaping of the fact content is performed in
scripts/kg.pybeyond basic whitespace trimming.\n- [COMMAND_EXECUTION]: The skill uses a bundled Python script (scripts/kg.py) to manage local file operations. The script is dependency-free and includes logic to validate entity names, effectively preventing path traversal through character restriction on input parameters.
Audit Metadata