graph-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The evaluation script
evals/run_behavior_suite.pyuses thesubprocessmodule to run behavior tests through thecodexCLI in a sandboxed environment. - [DYNAMIC_EXECUTION]: The
evals/run_behavior_suite.pyscript utilizesimportlib.utilto load local project files for internal testing and grading logic. - [INDIRECT_PROMPT_INJECTION]: The skill processes workflow artifacts and traces, creating an ingestion surface for indirect injection. However, the skill mandates strict JSON schema validation and formal boundary markers as documented in the security and governance references. Mandatory Evidence Chain: 1. Ingestion points: GraphSpec JSON and run traces. 2. Boundary markers: Required
schema_versionand artifact-specific schemas. 3. Capability inventory: Static validation tools and sandboxed evaluation scripts. 4. Sanitization: Comprehensive schema-based validation for all artifact inputs.
Audit Metadata