kombai-workflow

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the local Kombai application's executable to verify supported syntax via help --json and to perform tool registration using mcp install. This behavior is limited to the vendor's own tool and requires the application to be already installed on the host system.
  • [EXTERNAL_DOWNLOADS]: The instructions provide a link to the official vendor website (agent.kombai.com) for downloading the application. The skill contains specific safety constraints advising the agent to never download or execute installers without explicit instructions from the user.
  • [INDIRECT_PROMPT_INJECTION]: The agent is directed to inspect local MCP configuration settings and operating system metadata to identify installed builds. While this involves processing local system data, the skill includes instructions to verify paths and configuration formats rather than relying on unverified inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 08:20 AM