ontology-explorer
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/owl_parser.pyandscripts/ontology_summarizer.pyscripts allow fetching ontology data from remote URLs usingurllib.request.urlopen. This is a standard feature for retrieving up-to-date scientific definitions from repositories like GitHub. - [PROMPT_INJECTION]: The skill processes descriptive metadata from external OWL/XML files, which creates a potential surface for indirect prompt injection.
- Ingestion points:
owl_parser.pyfetches content from remote URLs or local file paths provided by the user. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential instructions embedded within ontology labels or descriptions.
- Capability inventory: The agent has access to
BashandReadtools, which could be targeted by successful injection. - Sanitization: The scripts parse the XML structure but do not sanitize the resulting text content for instructional patterns before presenting it to the agent.
Audit Metadata