epigraphdb-skill

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • Arbitrary File Write Capability: The script scripts/rest_request.py allows response data to be saved to a local path specified in the input. This provides a mechanism for creating or overwriting files on the local system, which should be monitored to ensure it is used only for intended data persistence.
  • Configurable Network Access: The skill is a generic REST wrapper that allows the base_url and path to be set dynamically. While intended for EpiGraphDB, this flexibility means the agent could be instructed to send requests to other external services or domains.
  • Data Ingestion Surface: The skill ingests data from external API endpoints and has the capability to store it locally. This creates a surface for indirect prompt injection, where data provided by an external source could attempt to influence the agent's behavior or result in unintended file system operations.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 03:28 PM