wiki-dedup
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local shell commands to manage the wiki environment. These include
gitfor creating pre-write snapshots,obsidian-wikifor memory synchronization and logging, andqmdfor updating the search index. These commands rely on environment variables such asOBSIDIAN_VAULT_PATHandQMD_CLIfor configuration. - [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface for indirect prompt injection due to its core functionality.
- Ingestion points: The skill reads the full content of all
.mdfiles within the configured wiki vault during the 'Semantic Verdict' phase (Step 3) to identify duplicate concepts. - Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions that might be embedded within the wiki pages themselves.
- Capability inventory: The skill possesses significant capabilities, including the ability to modify and delete files (merging pages), rewrite links across the entire vault, and execute local shell commands (
git,qmd,obsidian-wiki). - Sanitization: There is no evidence of sanitization or filtering of the wiki content before it is processed by the agent to make merging decisions.
Audit Metadata