wtk-knowledge-check

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/check.ts executes the git binary using execFileSync to retrieve commit metadata and versioning information for its drift detection feature. This is a standard functional requirement for documentation auditing tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads and parses markdown content and YAML frontmatter from user-controlled files in the project repository, creating an attack surface where embedded instructions could influence agent behavior.
  • Ingestion points: Markdown files in knowledge/wiki and knowledge/raw are read using readFileSync in scripts/check.ts.
  • Boundary markers: There are no explicit markers used to delimit user data or instruct the agent to ignore instructions embedded in the knowledge files.
  • Capability inventory: The skill can execute the git command via execFileSync and perform file system reads throughout the specified project root directory.
  • Sanitization: The skill does not sanitize or validate the content of the markdown files or parsed YAML frontmatter before processing them.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 09:44 PM