epigraphdb-skill
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- Arbitrary File Write Capability: The script
scripts/rest_request.pyallows response data to be saved to a local path specified in the input. This provides a mechanism for creating or overwriting files on the local system, which should be monitored to ensure it is used only for intended data persistence. - Configurable Network Access: The skill is a generic REST wrapper that allows the
base_urlandpathto be set dynamically. While intended for EpiGraphDB, this flexibility means the agent could be instructed to send requests to other external services or domains. - Data Ingestion Surface: The skill ingests data from external API endpoints and has the capability to store it locally. This creates a surface for indirect prompt injection, where data provided by an external source could attempt to influence the agent's behavior or result in unintended file system operations.
Audit Metadata