wiki-research

SUSPICIOUS: the core research-and-wiki workflow is coherent, and the scanner's backtick findings are false positives in markdown context. The main risk is that a vault-controlled backends file can cause the agent to execute arbitrary local CLIs and forward queries or API keys to them; this is especially concerning because the example Perplexity backend names a binary inconsistent with the official CLI. Not malicious on its face, but medium risk due to transitive command execution and third-party credential forwarding potential.