knowledge-ingest
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses Bash and Python scripts for file system management and post-processing. It adheres to security best practices by passing untrusted data (like candidate titles and summaries) through environment variables instead of direct string interpolation in commands or Python literals.
- [PROMPT_INJECTION]: As the skill processes data from external sources, it is subject to indirect prompt injection risks. It effectively mitigates these by using structured JSON manifests for data handoffs, sanitizing summaries, and employing an integrity sweep (
ingest-integrity.py) that deterministically validates page headers against the dispatch record to detect cross-source contamination. - [SAFE]: The skill demonstrates high security maturity through its use of atomic file operations to prevent data corruption, strict slug validation using an anchored regular expression (
^[a-z0-9][a-z0-9-]{0,79}$), and local scoping of all file operations to the project's metadata and wiki directories.
Audit Metadata