networkx
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the 'networkx' package using 'uv', which is a standard procedure for this well-known library.
- [INDIRECT_PROMPT_INJECTION]: The skill includes functions to read graph data from external files, creating a surface for potential indirect prompt injection. Ingestion points: Functions like nx.read_edgelist and nx.read_graphml in SKILL.md. Boundary markers: None identified. Capability inventory: Access to file writing and package installation. Sanitization: No explicit validation of graph data is described.
- [DYNAMIC_EXECUTION]: The documentation mentions using 'pickle' for performance, which is a known insecure deserialization method that can lead to arbitrary code execution if used on untrusted data.
Audit Metadata