cognee-community
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from untrusted external sources like Slack and Gmail. Evidence: Ingestion points: data connectors in the
cognee-communitynamespace used withcognee.remember(). Boundary markers: None explicitly mentioned in the skill. Capability inventory: Ingested data is indexed and stored in databases for later retrieval. Sanitization: None mentioned in the instructions. - [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill documentation includes instructions to install community-maintained packages from the vendor's ecosystem using
uv pip install. - [DYNAMIC_EXECUTION]: The skill employs a dynamic registration pattern where importing a
registermodule from a community package configures the core framework engine to support additional database providers.
Audit Metadata