cognee-sync
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script located at
${CLAUDE_PLUGIN_ROOT}/scripts/sync-session-to-graph.pyto perform data synchronization. - [INDIRECT_PROMPT_INJECTION]: The skill processes session data, including session text and Q&A, which may contain untrusted content that is then persisted into a permanent knowledge graph.
- Ingestion points: Session cache entries, session Q&A, and session text described in
SKILL.md. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are present in the instruction file.
- Capability inventory: Executes a local Python script via
python3to perform graph enrichment, triplet extraction, and persistence. - Sanitization: No explicit sanitization or filtering logic for external content is documented in the skill markdown.
Audit Metadata