community-ontology-contribution
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill instructs the agent to use shell commands such as
mkdirandcpfor directory management, andnpm runfor local build and validation tasks. These are standard operations for repository maintenance and contribution workflows. - External Data Ingestion: The workflow involves accepting RDF/OWL files from community contributors. While these files are treated as data, processing untrusted external content is a security consideration; the skill manages this risk by providing specific validation steps (
npm run catalogue:build) to ensure the submissions meet project requirements. - Controlled Reference Access: The skill references a local CSV file (
data/reference/FNF-2026-06-01-01002-0268.csv) specifically to standardize person names. This is an excellent privacy practice that prevents the use of real or sensitive names in community-contributed examples.
Audit Metadata