konecty-meta-doctor
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The script scripts/meta_doctor.py reads configuration and credential files from the user's home directory at ~/.konecty/.env and ~/.konecty/credentials to retrieve authentication tokens. This access is limited to the vendor's own configuration directory.
- [EXTERNAL_DOWNLOADS]: The script performs network requests to the Konecty API using the standard urllib library to fetch metadata reports from the user-configured host.
- [COMMAND_EXECUTION]: The skill operates by executing the included Python script scripts/meta_doctor.py to perform its primary function of metadata validation.
- [PROMPT_INJECTION]: The skill processes metadata descriptions from the API response; while these are untrusted inputs, the script only prints them to the console and does not use them in sensitive operations.
Audit Metadata