wiki-export
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from user-provided markdown files in the vault to extract metadata and links. This creates a surface where malicious content within those files could attempt to influence the agent's behavior during the export process.\n
- Ingestion points: Markdown (.md) files throughout the Obsidian vault.\n
- Boundary markers: None present in the parsing instructions to distinguish between data and potentially malicious instructions.\n
- Capability inventory: File system access to read the vault and write files to the 'wiki-export/' directory.\n
- Sanitization: Employs SQL escaping by doubling single quotes for string values in the 'postgres.sql' output.\n- [EXTERNAL_DOWNLOADS]: The 'graph.html' visualization output includes a reference to the 'vis-network' library via the unpkg.com CDN. This is a common and well-known service for package distribution.
Audit Metadata