skills/kntnt/skills/commit/Gen Agent Trust Hub

commit

Warn

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/invoke.py implements a discovery mechanism that searches for an executable named kntnt.py across more than 60 predefined directory paths, mostly hidden configuration folders in the user's home directory (e.g., ~/.claude/skills, ~/.cursor/skills, ~/.codeium/windsurf/skills). Once found, it executes this engine using subprocess.run(). This constitutes dynamic loading and execution from computed paths.
  • [COMMAND_EXECUTION]: The skill relies on the execution of external scripts (invoke.py, kntnt.py, and ship.py) to perform its primary functions. The scripts/invoke.py file specifically uses subprocess.run() to invoke the management engine, passing user-supplied instructions via stdin and returning the engine's output to the agent for execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 23, 2026, 11:41 AM