setup-ontology
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell and git commands such as
grep,git mv, andgit rmto locate and rename placeholder strings across the project files and directories during the setup and self-cleanup phases. - [EXTERNAL_DOWNLOADS]: During the cleanup phase, the skill executes
npx skills add padamson/ontology-authoring-templateto fetch and install a tracked version of an external author-maintained skill. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and processes content from various local project files that could contain untrusted data. 1. Ingestion points: Reads local files including
schema/*.yaml,data/*.yaml,*.toml,README.md, andCLAUDE.md. 2. Boundary markers: No boundary markers or instructions to ignore embedded content are implemented. 3. Capability inventory: The skill can move and delete files, modify their contents, and execute shell scripts and external tool installers. 4. Sanitization: No sanitization or validation of the ingested text is performed during the global renaming process. - [DYNAMIC_EXECUTION]: The skill modifies configuration files and potentially script-related paths that are subsequently used by other tools (e.g.,
mdbook build) and executes a local installation script (./scripts/install-assets.sh).
Audit Metadata