graphify
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
graphifyypackage from PyPI viapiporuv. It also clones remote repositories from GitHub and fetches content from external URLs (YouTube, arXiv, etc.) for ingestion into the knowledge graph. - [COMMAND_EXECUTION]: The skill uses shell commands and Python scripts to perform file detection, AST extraction from code, clustering, and data exports. It includes logic to locate the correct Python interpreter by reading binary shebangs and executing diagnostic Python blocks.
- [PERSISTENCE]: The skill includes functionality to install a Git
post-commithook (graphify hook install), ensuring that the knowledge graph is automatically rebuilt whenever new code is committed to a repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted files (code, documents, images) to build a knowledge graph, creating a potential surface for indirect prompt injection. Ingestion points include any file within the provided
INPUT_PATH, cloned repositories, or URLs fetched viagraphify add. The extraction process relies on LLM subagents without explicit boundary markers for untrusted content. - [DYNAMIC_EXECUTION]: The skill can instantiate an MCP (Model Context Protocol) server to expose graph query tools to other agents and supports multi-agent coordination for parallel semantic extraction using platform-specific spawning mechanisms.
Audit Metadata