ontology-explorer
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
owl_parser.pyandontology_summarizer.pyscripts allow fetching ontology files from remote HTTPS sources. This is a core feature for accessing public materials science ontologies like CMSO and ASMO hosted on GitHub. - Evidence:
scripts/owl_parser.py(line 214) usesurllib.request.urlopenwith a 30-second timeout. - [COMMAND_EXECUTION]: The skill executes local Python scripts via Bash to process ontology data and return results to the agent. All subprocess calls use explicit argument lists.
- Evidence:
SKILL.mddocumentation provides explicit command-line examples for runningclass_browser.py,property_lookup.py,owl_parser.py, andontology_summarizer.py. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of OWL/XML files, which could potentially contain malicious text designed to influence agent behavior.
- Ingestion points:
scripts/owl_parser.pyreads data from a user-supplied file path or URL via the--sourceargument. - Boundary markers: The parser outputs structured JSON, providing clear separation between the data and the agent's instructions.
- Capability inventory: The skill is limited to
BashandReadtools; scripts use Python's standard library only. - Sanitization: Input parameters like
--class,--property, and--searchare validated against a restricted safe-character regex (^[\w \-/()]{1,128}$) and length-capped at 128 characters.
Audit Metadata