Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local ontology-reasoning helper with some overstated or incorrect reasoning examples, but no evidence of hidden access, persistence, exfiltration, or destructive behavior.
Install only if you want conceptual ontology-inference guidance or a small demo engine. Do not rely on it as a complete RDF/OWL reasoner for production, compliance, medical, access-control, or policy decisions without fixing the documented reasoning gaps and validating outputs against a real reasoner.
The skill documentation advertises inference capabilities and strategies that are not actually implemented, creating a trust gap between expected and actual behavior. In security- or compliance-sensitive knowledge graph workflows, this can lead users to rely on missing validation and inference features, causing silent logic failures, incomplete reasoning, and incorrect policy or access decisions.
The kinship example reverses the semantics of the inverse property: from 'A parent B' it incorrectly infers 'B hasChild A' instead of 'A hasChild B'. In an ontology inference helper, this kind of directional error can systematically generate false relationship data, corrupt downstream reasoning, and mislead any consumers relying on inferred family links.
The docstring states this method performs 'Backward chaining: query-driven inference,' but the body just calls _forward_chaining() and changes the reported strategy string. This is an active contradiction between documentation and behavior, not merely an omitted detail.
The manifest says the skill supports inferring new relationships, class memberships, properties, and domain/range constraints. However, domain/range inference is explicitly skipped in this implementation, property inheritance is a no-op, and the code has no mechanism to ingest explicit relationship facts from the knowledge graph, so most advertised inference behavior is not actually performed.
The biomedical example uses 'rdf:type' where subclass relations should be expressed as 'subClassOf', conflating instance typing with class hierarchy semantics. In a reasoning skill focused on RDF/OWL inference, this can teach or reinforce incorrect modeling patterns, causing invalid inferences or broken interoperability with standards-compliant tooling.
The location inference output includes 'Earth' even though that node is absent from the declared ontology. This demonstrates inference results that are not grounded in the provided schema, which can undermine trust in the skill and encourage consumers to accept hallucinated or out-of-ontology facts as valid conclusions.
The method is documented as a 'Hybrid approach,' implying combined or distinct inference behavior. In reality it directly returns _forward_chaining(), so the documentation misrepresents what the code does.
No suspicious patterns detected.
