Graphiti

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.1
• Hash: ec6ca9aaf0d87ea08c854f63f980c03df853d936021acaadf6d4056761354aab
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides functionality to interact with a Graphiti knowledge graph API, using standard `curl` and `jq` commands. The `env-check.sh` script (references/env-check.sh) safely discovers the Graphiti service URL via Clawdbot config, environment variables, or a localhost fallback, and performs a health check. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in SKILL.md. All actions are transparent and directly related to the stated purpose of knowledge graph operations.