graphify
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute various CLI tools including
graphify,uv, andgitto build and maintain project knowledge graphs. These are standard operations for the tool's lifecycle. - [DYNAMIC_EXECUTION]: The included
graphify_doctor.pyscript executes a Python snippet via a subprocess to determine the installed version of thegraphifyypackage. This is a common pattern for diagnostic tools to verify environment state. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the
graphifyypackage from PyPI usinguvand refers to external documentation and community discussions on GitHub and Reddit. The package naming is clarified in the instructions to avoid confusion with existing packages. - [SAFE]: The diagnostic script performs read-only operations on project metadata and local tool configuration files (e.g.,
~/.codex/config.toml) to provide troubleshooting recommendations. No data exfiltration or credential harvesting patterns were found.
Audit Metadata