kombai-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the local Kombai application's executable to verify supported syntax via
help --jsonand to perform tool registration usingmcp install. This behavior is limited to the vendor's own tool and requires the application to be already installed on the host system. - [EXTERNAL_DOWNLOADS]: The instructions provide a link to the official vendor website (agent.kombai.com) for downloading the application. The skill contains specific safety constraints advising the agent to never download or execute installers without explicit instructions from the user.
- [INDIRECT_PROMPT_INJECTION]: The agent is directed to inspect local MCP configuration settings and operating system metadata to identify installed builds. While this involves processing local system data, the skill includes instructions to verify paths and configuration formats rather than relying on unverified inputs.
Audit Metadata