grokipedia-cli
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of an external CLI tool named
grokipediafor all its knowledge retrieval, search, and editing functionality. - [INDIRECT_PROMPT_INJECTION]: The skill provides the agent with capabilities to fetch content from an external, unofficial wiki site, creating a surface for indirect prompt injection attacks.
- Ingestion points: Untrusted content is ingested into the agent's context through
grokipedia search,grokipedia page,grokipedia preview, andgrokipedia listcommands. - Boundary markers: The skill instructions lack explicit delimiters or instructions for the agent to ignore any embedded commands or directions found within the retrieved wiki articles.
- Capability inventory: The skill allows for subsequent actions based on the ingested data, including further searches and the preparation of contribution/edit requests (
grokipedia suggest,grokipedia edit). - Sanitization: There is no evidence of content sanitization or validation to prevent the agent from acting on malicious instructions hidden within wiki articles.
Audit Metadata