fin-kg-define-fitness-for-use

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for graph profiling and assessment. It uses Cypher queries to discover node labels, relationship types, and property keys within a Neo4j database, which is consistent with its stated financial knowledge graph profiling purpose.
  • [COMMAND_EXECUTION]: The skill invokes local Python scripts (validate_artifact.py, inventory_graph_artifact.py) to process artifacts and validate results against defined schemas. These operations are restricted to the local environment and the skill's own directory structure.
  • [EXTERNAL_DOWNLOADS]: The documentation for the HTML report generation specifies the use of Chart.js via a well-known CDN (jsdelivr.net). This is a standard and safe practice for generating client-side visualizations in self-contained reports.
  • [SAFE]: The Python scripts follow secure coding practices, specifically utilizing yaml.safe_load() to prevent unsafe deserialization of configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 06:01 AM
Security Audit — agent-trust-hub — fin-kg-define-fitness-for-use