awiki
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the '@awiki/cli' package globally via 'npm' and the official Awiki skills from the vendor's GitHub or Gitee repositories.
- [REMOTE_CODE_EXECUTION]: During setup and upgrades, the skill uses 'npx skills add' to fetch and integrate code directly from the vendor's remote git repositories.
- [COMMAND_EXECUTION]: The skill interacts with the local system through 'awiki-cli' to manage identity storage, SQLite databases, and background listener services.
- [PROMPT_INJECTION]: The skill includes explicit security guidelines to treat external message content as data rather than instructions, mitigating potential indirect prompt injection attacks from user-generated content.
Audit Metadata