Scan Report
0 /100
genealogy-agent
Extracts family history from raw text, builds a local knowledge graph, generates Mermaid trees, and exports to Obsidian format.
A legitimate genealogy research agent with properly declared file I/O and documented web search functionality. No malicious indicators detected.
Safe to install
This skill is safe for use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | SKILL.md line 13-17 declares file generation (graphs, vaults, exports) |
| Network | READ | READ | ✓ Aligned | SKILL.md line 10 declares 'Auto-Research' with web search; research.py uses duck… |
File Tree
9 files · 27.0 KB · 695 lines Python 6f · 538L
JSON 1f · 93L
Markdown 2f · 64L
├─
▾
scripts
│ ├─
build_graph.py
Python
│ ├─
export_gedcom.py
Python
│ ├─
extract.py
Python
│ ├─
generate_mermaid.py
Python
│ ├─
generate_obsidian.py
Python
│ └─
research.py
Python
├─
README.md
Markdown
├─
skill.json
JSON
└─
SKILL.md
Markdown
Dependencies 3 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
pydantic | * | pip | No | Standard data validation |
litellm | * | pip | No | LLM abstraction layer |
duckduckgo-search | * | pip | No | Documented web search functionality |
Security Positives
✓ All capabilities explicitly declared in SKILL.md (file generation, web research)
✓ No shell execution, subprocess, or eval() usage
✓ No credential harvesting or environment variable iteration for sensitive keys
✓ No base64 encoding/decoding or obfuscated payloads
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)
✓ Network access limited to documented DuckDuckGo search functionality
✓ Filesystem operations only for genealogy data (graphs, markdown, GEDCOM)
✓ Clean dependency set: litellm, pydantic, duckduckgo-search
✓ Standard CLI pattern with proper argument handling