@ruvector/graph-data-generator
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The documentation provides instructions to use
npxto install and run the@ruvector/graph-data-generatorandruvectorpackages from the npm registry. - [EXTERNAL_DOWNLOADS]: The skill requires downloading external packages from
npmjs.comand communicates with OpenRouter for its AI-powered generation features. - [DATA_EXFILTRATION]: The property generation feature (
propertyGenerator: 'ai') sends metadata and schema definitions to OpenRouter's API (specifically themoonshotai/kimi-k2model) to facilitate realistic data synthesis. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. * Ingestion points: The
propertySchemaobject inSKILL.mdallows users to define property types and descriptions. * Boundary markers: There are no documented delimiters or instructions to ignore embedded commands in the schema. * Capability inventory: The tool possesses file-writing capabilities through thegen.export()method across various formats (CSV, JSON, Cypher) as documented inSKILL.mdandcommands.md. * Sanitization: The documentation does not specify any sanitization or validation of the schema content before it is interpolated into AI prompts. - [NO_CODE]: This skill consists entirely of documentation and instructions in Markdown format and does not include any standalone executable scripts or binaries within the provided file list.
Audit Metadata