kwallet-write
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like qdbus and kwallet-query to interact with the org.kde.kwalletd6 D-Bus service and modify the local wallet database.
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect injection via user-supplied secret data.
- Ingestion points: Data enters through the KEY and VALUE variables used in the bash scripts within SKILL.md.
- Boundary markers: There are no markers or instructions telling the agent to sanitize or delimit user input from the command structure.
- Capability inventory: The skill has the ability to read, write, and delete entries in the system's credential store via qdbus.
- Sanitization: There is no evidence of sanitization or escaping of variables before they are interpolated into shell commands, which could lead to command injection if the input contains shell metacharacters.
Audit Metadata