commit
Warn
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/invoke.pyimplements a discovery mechanism that searches for an executable namedkntnt.pyacross more than 60 predefined directory paths, mostly hidden configuration folders in the user's home directory (e.g.,~/.claude/skills,~/.cursor/skills,~/.codeium/windsurf/skills). Once found, it executes this engine usingsubprocess.run(). This constitutes dynamic loading and execution from computed paths. - [COMMAND_EXECUTION]: The skill relies on the execution of external scripts (
invoke.py,kntnt.py, andship.py) to perform its primary functions. Thescripts/invoke.pyfile specifically usessubprocess.run()to invoke the management engine, passing user-supplied instructions viastdinand returning the engine's output to the agent for execution.
Audit Metadata