wiki-updater
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands to analyze code changes using
git diff, run local utility scripts vianode .trellis/scripts/update-wiki-from-stage.mjs, and build the documentation site usingpnpm build.- [EXTERNAL_DOWNLOADS]: Performspnpm installwithin thedocs/wikidirectory. This fetches Node.js dependencies from the official npm registry as part of the documentation build and verification process.- [PROMPT_INJECTION]: Vulnerable to indirect prompt injection during the analysis of untrusted data. - Ingestion points: Reads raw source code from
packages/(including types, hooks, and logic) and configuration files fromconfigs/to determine documentation updates. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when the agent reads the source code files.
- Capability inventory: The skill possesses
Writeaccess to the filesystem to modify Markdown files andShellexecution capabilities to run build tools and scripts. - Sanitization: There is no evidence of sanitization, escaping, or validation of the ingested code content before it is processed by the agent to generate new documentation.
Audit Metadata