wiki
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system utilities such as
ln -sfor creating symbolic links to external repository documents,git logfor checking source freshness, andgrepfor identifying cross-vault wikilinks. These are functional requirements for vault maintenance. - [COMMAND_EXECUTION]: The closeout procedure involves executing a local Python script
python3 skill-issue/scripts/quick_validate.py wikito ensure the skill's operational integrity. This is a standard validation practice within the development environment. - [DATA_EXFILTRATION]: The skill interacts with a local registry file located at
~/repos/skillbox-config/wikis.yamlto resolve vault paths and client overlays. There is no evidence of this data being transmitted to external networks. - [PROMPT_INJECTION]: The skill processes untrusted external content from repositories (e.g.,
VISION.md,SKILL.md) and user notes, which serves as a surface for indirect prompt injection. However, the skill incorporates human-in-the-loop checkpoints for high-impact actions (deleting, publishing, overriding exclusions) and uses an 'App Idea Intake Gate' to categorize and filter speculative content.
Audit Metadata