primekg
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: Hardcoded absolute path to local data. The file scripts/query_primekg.py uses a fixed path /mnt/c/Users/eamon/Documents/Data/PrimeKG/kg.csv which reveals a specific username ('eamon') and the host system directory structure.
- [INDIRECT_PROMPT_INJECTION]: Processing of untrusted data from an external source. The skill reads from a CSV file and returns its content to the agent context without sanitization or boundary markers. Ingestion points: The _load_kg function in scripts/query_primekg.py reads a CSV file from a local path. Boundary markers: Absent. Capability inventory: The script is limited to read operations using pandas; no network or file-write capabilities were detected. Sanitization: Content is returned directly from the CSV without validation or escaping.
Audit Metadata