wiki-updater

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes shell commands to analyze code changes using git diff, run local utility scripts via node .trellis/scripts/update-wiki-from-stage.mjs, and build the documentation site using pnpm build.- [EXTERNAL_DOWNLOADS]: Performs pnpm install within the docs/wiki directory. This fetches Node.js dependencies from the official npm registry as part of the documentation build and verification process.- [PROMPT_INJECTION]: Vulnerable to indirect prompt injection during the analysis of untrusted data.
  • Ingestion points: Reads raw source code from packages/ (including types, hooks, and logic) and configuration files from configs/ to determine documentation updates.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when the agent reads the source code files.
  • Capability inventory: The skill possesses Write access to the filesystem to modify Markdown files and Shell execution capabilities to run build tools and scripts.
  • Sanitization: There is no evidence of sanitization, escaping, or validation of the ingested code content before it is processed by the agent to generate new documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 03:59 PM