wikipedia-search
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically installs the 'Wikipedia-API' Python package if it is missing using pip. This is a common and transparent dependency management practice for this type of skill.
- [COMMAND_EXECUTION]: The script uses subprocess.check_call to execute the pip installation command. This is restricted to installing the specific required library and does not process arbitrary user input, making it safe.
- [DATA_EXFILTRATION]: Network operations are confined to official Wikipedia/MediaWiki API endpoints (e.g., wikipedia.org) for searching and fetching article content. No sensitive local data is accessed or transmitted.
- [PROMPT_INJECTION]: The skill instructions (SKILL.md) contain clear operational guidelines and do not include any patterns aimed at overriding agent safety filters or hijacking model behavior.
Audit Metadata