frappe-wiki-skill
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/wikitool/client.pyto interact with thefrappectlCLI tool. The implementation correctly uses argument lists instead of shell strings, which mitigates shell injection risks. The use of this tool is the primary and intended purpose of the skill for site management. - [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to read and sync local markdown files to a remote wiki. While it processes external data, it functions as a pass-through tool and includes specific instructions in
SKILL.mdto prevent the agent from executing unauthorized authentication commands or accessing sensitive environment variables.
Audit Metadata