wiki-connect
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to establish links and project structures. Evidence includes the use of
ln -s,cmd //c mklink //J,mkdir -p, andgit rev-parseacross macOS, Linux, and Windows environments to automate environment setup.- [EXTERNAL_DOWNLOADS]: The skill performs remote repository cloning based on user input. Evidence includes the execution ofgit cloneif a git URL is provided by the user during the wiki discovery workflow.- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing external wiki content. 1. Ingestion points: The agent reads.wiki/CONTRIBUTING.mdand scans wiki directories for.mdfiles in Step 4. 2. Boundary markers: Absent; the skill incorporates discovered file paths and descriptions directly intoAGENTS.md. 3. Capability inventory: Includes file writing toAGENTS.md,CLAUDE.md, andsettings.json, and shell command execution for directory creation and repository cloning. 4. Sanitization: Absent; the skill relies on external file content to guide its configuration logic.
Audit Metadata