wiki-fold
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Unix utilities including grep, head, and cat via Bash to parse log entries and display fold content. These operations are restricted to the local wiki directory and are used for data extraction and formatting.- [SAFE]: The skill includes a robust duplicate detection mechanism that checks for the existence of a deterministic fold ID before performing any write operations.- [SAFE]: The skill processes local wiki logs and markdown pages, which represents an indirect prompt injection surface. However, it implements significant mitigations: (1) Ingestion points: reads local wiki/log.md and referenced pages. (2) Boundary markers: explicit instructions for extractive-only summarization and 'no invention' policies. (3) Capability inventory: limited to file writes and local bash parsing. (4) Sanitization: mandatory self-checks and grep-based count verification of numeric claims against the source entries are used to validate the output integrity.
Audit Metadata