nav-triz
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in
SKILL.mdguide the agent to execute local Python scripts (triz_suggest.pyandgraph_manager.py) to generate suggestions and record decisions. Evidence: Shell command examples provided in the 'Protocol' section ofSKILL.mdfor tool usage. The unit test filefunctions/test_triz_suggest.pyutilizessubprocess.runto execute the suggestion script for verification purposes. - [DYNAMIC_EXECUTION]: The
functions/triz_suggest.pyscript dynamically adjusts the Python search path at runtime to import utility functions from a related internal skill. Evidence: Use ofsys.path.insert(0, ...)to locate and loadgraph_manager.pyfrom thenav-graphdirectory. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided strings describing technical contradictions, which are then used to query a knowledge base. Ingestion points: The contradiction description entered by the user and passed via the
--contradictionCLI flag. Boundary markers: The instructions do not define specific delimiters for user input, though the script performs tokenization. Capability inventory: The skill performs local file reads (knowledge graph) and provides structured text output. Sanitization: Thetriz_suggest.pyscript employs a restrictive regular expression ([a-z0-9][a-z0-9+\\-]*) to tokenize the input, which serves as a basic filter for non-alphanumeric characters.
Audit Metadata