konecty-modules
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The script
scripts/modules.pyreads sensitive configuration data from~/.konecty/.envand~/.konecty/credentialsto manage session access to the Konecty API.\n- [PROMPT_INJECTION]: The skill processes and displays external data from the Konecty API, which could be used for indirect prompt injection if the source is compromised.\n - Ingestion points: Data is fetched in
scripts/modules.pyfrom the/rest/query/explorer/modulesendpoint.\n - Boundary markers: The output does not include delimiters or warnings to ignore instructions within the API data.\n
- Capability inventory: The script's operations are restricted to printing information to stdout; it has no capabilities for executing commands or modifying the system.\n
- Sanitization: There is no sanitization or validation of module and field names returned by the API.
Audit Metadata