paperclip-wiki-fetch
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for data retrieval.
- Evidence:
SKILL.mdcontains severalcurlexamples for interacting with the Paperclip API to fetch page content and list pages. - [DATA_EXFILTRATION]: The skill performs network requests to external endpoints, handling authentication tokens via environment variables.
- Evidence: Requests are directed to
https://your-paperclip-host.example.com(or other inferred hosts) using anAuthorization: Bearer $TOKENheader. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection due to the ingestion of external data.
- Ingestion points: Markdown content retrieved from the
/api/plugins/paperclipai.plugin-llm-wiki/data/page-contentendpoint. - Boundary markers: No specific delimiters or instructions are provided to the agent to treat fetched data as untrusted or to ignore embedded instructions.
- Capability inventory: The agent uses
curlto perform network operations and may interact with thepaperclipaiCLI tool. - Sanitization: There is no evidence of sanitization or validation of the content fetched from the wiki before it is processed by the agent.
Audit Metadata