entry
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Instructions specify the use of shell commands
catandghto inspect local plugin configuration files (~/.claude/plugins/cache/) and query remote GitHub repository data for version comparisons. - [PROMPT_INJECTION]: Indirect prompt injection surface identified due to the ingestion and processing of data from an external knowledge graph.
- Ingestion points: Data is retrieved from the NKS server via tools like
nks_searchandnks_lookas defined inSKILL.md. - Boundary markers: Absent; there are no instructions to use specific delimiters or to disregard embedded directives within the graph content.
- Capability inventory: The agent possesses the capability to modify graph nodes (
nks_update,nks_arrow) and execute shell commands. - Sanitization: Absent; the skill does not define filtering or escaping mechanisms for the ingested data.
Audit Metadata