panschema-development
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the panschema binary from the author's GitHub repository (
https://github.com/padamson/panschema) usingcargo install. This targets a well-known service and the resource belongs to the skill author. - [COMMAND_EXECUTION]: The documentation describes various CLI operations including schema generation, verification, and migration. These commands involve file system writes and network operations (
fetch) to resolve dependencies, which are consistent with the tool's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The tool possesses an attack surface for indirect prompt injection as it processes external schema and instance data files. However, it includes built-in verification mechanisms (
panschema verify) and conformance checks to validate input data against models. - Ingestion points: LinkML YAML and OWL/Turtle files processed via CLI flags or the
panschema.tomlmanifest. - Boundary markers: Not explicitly detailed in the prompt instructions, but the tool enforces schema-level constraints.
- Capability inventory: The skill can write files to the local system (DDL, HTML, JSON Schema) and perform network fetches to GitHub for remote packages.
- Sanitization: The tool performs schema validation, conformance checking, and identifier resolution.
Audit Metadata