skills/mathews-tom/armory/kg-builder/Gen Agent Trust Hub

kg-builder

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill demonstrates secure coding practices, specifically using yaml.safe_load() in its validation scripts to prevent potential YAML deserialization vulnerabilities.\n- [SAFE]: No hardcoded credentials, API keys, or attempts to access sensitive file paths (such as SSH keys or environment variables) were found within the skill or its associated references.\n- [SAFE]: The included Python scripts (scripts/validate_ontology.py and scripts/blocking_report.py) use only standard libraries and the well-known pyyaml package, with no network activity or remote code execution detected.\n- [SAFE]: The workflow design prioritizes deterministic code for identity merging and data validation, effectively mitigating potential indirect prompt injection risks from unstructured source text.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 06:54 PM
Security Audit — agent-trust-hub — kg-builder