wikipedia-search

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automatically installs the 'Wikipedia-API' Python package if it is missing using pip. This is a common and transparent dependency management practice for this type of skill.
  • [COMMAND_EXECUTION]: The script uses subprocess.check_call to execute the pip installation command. This is restricted to installing the specific required library and does not process arbitrary user input, making it safe.
  • [DATA_EXFILTRATION]: Network operations are confined to official Wikipedia/MediaWiki API endpoints (e.g., wikipedia.org) for searching and fetching article content. No sensitive local data is accessed or transmitted.
  • [PROMPT_INJECTION]: The skill instructions (SKILL.md) contain clear operational guidelines and do not include any patterns aimed at overriding agent safety filters or hijacking model behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 12:33 AM