kb-monitor
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
analyze_access.py,track_kb_access.py) and delegates tasks to other internal skills like/kb-mint. These operations are used for log analysis and skill management within the project context. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes project documentation and access logs to generate recommendations.
- Ingestion points: The
analyzeragent readsindex.mdfiles from the knowledge base to classify content.analyze_access.pyreads a local JSONL log file. - Boundary markers: The skill does not use explicit delimiters or warnings when the
analyzeragent reads KB content. - Capability inventory: The
analyzeragent hasReadandBashtools. The main skill can execute local scripts and interact with project memory. - Sanitization: The scripts use standard JSON parsing for structured data and do not execute content derived from the logs or documentation.
Audit Metadata