wtk-knowledge-check
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/check.tsexecutes thegitbinary usingexecFileSyncto retrieve commit metadata and versioning information for its drift detection feature. This is a standard functional requirement for documentation auditing tools. - [INDIRECT_PROMPT_INJECTION]: The skill reads and parses markdown content and YAML frontmatter from user-controlled files in the project repository, creating an attack surface where embedded instructions could influence agent behavior.
- Ingestion points: Markdown files in
knowledge/wikiandknowledge/raware read usingreadFileSyncinscripts/check.ts. - Boundary markers: There are no explicit markers used to delimit user data or instruct the agent to ignore instructions embedded in the knowledge files.
- Capability inventory: The skill can execute the
gitcommand viaexecFileSyncand perform file system reads throughout the specified project root directory. - Sanitization: The skill does not sanitize or validate the content of the markdown files or parsed YAML frontmatter before processing them.
Audit Metadata