db-defaults-taudelta
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEMETADATA_POISONINGEXTERNAL_DOWNLOADS
Full Analysis
- [METADATA_POISONING]: The skill employs a fictionalized 'future' timeline (dated August 2026) and fabricated software histories to present itself as authoritative, recent research. Specifically, it claims that the Kuzu graph database was acquired by Apple and subsequently forked by the community into a project named 'LadybugDB'. This narrative is designed to influence the agent's selection of technologies by overriding its internal training data with false, 'newer' information.\n- [EXTERNAL_DOWNLOADS]: The skill recommends the 'ladybug' package for graph database functionality. In reality, the 'ladybug' package on PyPI is a well-established library for environmental analysis and building simulation (Ladybug Tools) and does not contain the database classes or methods (e.g., 'lb.Database', 'lb.Connection') described in the provided snippets. Following this recommendation would lead to the installation of incorrect software based on a non-existent project ('LadybugDB').
Audit Metadata