build-graph
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository content to build a persistent knowledge graph, which presents a surface for indirect prompt injection if the graph content is later used to generate agent responses.
- Ingestion points: Repository source code files (Python, JS, Go, etc.) in the project root.
- Boundary markers: None specified in the instructions for the parsing process.
- Capability inventory: The skill utilizes
list_graph_stats_toolandbuild_or_update_graph_toolfor data processing. - Sanitization: No sanitization or filtering of input code comments or metadata is mentioned.
Audit Metadata