explain
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/invoke.pyusessubprocess.runto execute thekntnt.pyengine viauv run. This is used to pass the user's input to the management component that performs the requested explanation. - [DYNAMIC_EXECUTION]: The skill implements a mechanism in
scripts/invoke.pyto dynamically locate its own management engine across a wide variety of potential installation paths (e.g., in subdirectories of~/.claude/skills,~/.cursor/skills,~/.codeium/windsurf/skills, etc.). While this involves constructing and executing paths at runtime, it is clearly intended for cross-platform compatibility within the vendor's ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill ingests raw user input from the command line and passes it directly to the underlying engine through standard input, creating a surface for indirect prompt injection.
- Ingestion points: User input provided as arguments to the
/explaincommand is captured and passed to the subprocess inscripts/invoke.py. - Boundary markers: The skill documentation describes a
--separator to distinguish between formal instructions and contextual guidance, which can help structure inputs. - Capability inventory: The skill has the capability to execute local scripts and interact with the filesystem via the
uvtool and Python'ssubprocessmodule. - Sanitization: No explicit input sanitization or validation logic is visible in the provided script files before the data is passed to the execution engine.
Audit Metadata