understand-onboard
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
greputility to search and filter content within the.understand-anything/knowledge-graph.jsonfile. This is a standard practice for efficient data retrieval in development environments. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external file (
.understand-anything/knowledge-graph.json) to generate documentation. - Ingestion points: Content is read from
.understand-anything/knowledge-graph.json(SKILL.md). - Boundary markers: None are present; the skill assumes the JSON data is well-formatted and safe to summarize.
- Capability inventory: The skill uses file reading (grep/read) and file writing (saving to
docs/ONBOARDING.md). - Sanitization: There is no explicit sanitization of the strings found in the JSON (e.g., node summaries or tags) before they are placed into the markdown guide.
Audit Metadata