konecty-update
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The script
scripts/update.pyreads local configuration files containing sensitive credentials at~/.konecty/.envand~/.konecty/credentials. This is the expected behavior for the Konecty integration to authenticate its API requests. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it processes untrusted data. 1. Ingestion points: The
patchandupdatecommands inscripts/update.pytake data from CLI arguments. 2. Boundary markers: Absent. The instructions do not define boundaries for external data. 3. Capability inventory: The script performs network operations (HTTP PUT/POST) to the Konecty API. 4. Sanitization: No filtering or sanitization is applied to the input JSON data before it is sent to the server.
Audit Metadata