writing
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied text and external graph data to create or update persistent records, creating an attack surface for embedded instructions.\n
- Ingestion points: User prompts (e.g., 'add node', 'record') and search results from tools such as
iskron_searchandiskron_semantic_searchdescribed in the 'Gate of Novelty' section of SKILL.md.\n - Boundary markers: The methodology defines a strict ontology of node types (
given_as) and behavioral states (epistemic,ontic, andvolitionalmodes) that constrain the interpretation of ingested data.\n - Capability inventory: The skill utilizes write-access tools including
iskron_add_kriya,iskron_add_phenomenon,iskron_add_vimarsha, and the multi-operationiskron_batch.\n - Sanitization: Instructions prohibit the inclusion of provenance data in node bodies and restrict the
attrsfield to structured data (non-prose), reducing the surface for arbitrary instruction injection.\n- [COMMAND_EXECUTION]: The skill leverages theiskron_batchtool to execute sequences of graph modification commands. Although these are domain-specific operations for the Iskron graph, they provide a powerful mechanism for altering the persistent state and future context of the agent.
Audit Metadata