skills/ar9av/obsidian-wiki/wiki-dedup/Gen Agent Trust Hub

wiki-dedup

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several local shell commands to manage the wiki environment. These include git for creating pre-write snapshots, obsidian-wiki for memory synchronization and logging, and qmd for updating the search index. These commands rely on environment variables such as OBSIDIAN_VAULT_PATH and QMD_CLI for configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface for indirect prompt injection due to its core functionality.
  • Ingestion points: The skill reads the full content of all .md files within the configured wiki vault during the 'Semantic Verdict' phase (Step 3) to identify duplicate concepts.
  • Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions that might be embedded within the wiki pages themselves.
  • Capability inventory: The skill possesses significant capabilities, including the ability to modify and delete files (merging pages), rewrite links across the entire vault, and execute local shell commands (git, qmd, obsidian-wiki).
  • Sanitization: There is no evidence of sanitization or filtering of the wiki content before it is processed by the agent to make merging decisions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 10:30 AM