kwallet-list
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
qdbusto interact with the KDE Wallet service (org.kde.kwalletd6) for listing wallets, folders, and entry keys. These commands run within the user's desktop session context. - [INDIRECT_PROMPT_INJECTION]: The skill processes variables such as
$WALLETand$FOLDERwhich may be derived from user input or project data. - Ingestion points: Wallet names and folder names in
SKILL.md. - Boundary markers: None present.
- Capability inventory: Shell execution via
qdbuscalls. - Sanitization: None observed in the provided snippets. While this creates a surface for indirect injection, the impact is limited by the specific KWallet DBus API methods used (
folderList,entryList) and the fact that opening a wallet triggers a native OS-level unlock prompt for the user.
Audit Metadata