wiki
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local Python package (
wikicli) for its core logic, ensuring that sensitive operations like indexing and searching are performed by deterministic code rather than purely by language model inference. - [SAFE]: Robust security controls are implemented in
src/wikicli/notebook.pyfor handling file paths. TheNote.resolve_sourceandNote.normalize_sourcemethods usePath.resolve()andrelative_to()to strictly enforce that all file operations remain within the configured notebook directory, effectively preventing path traversal vulnerabilities. - [SAFE]: No remote code execution vectors, such as
eval(),exec(), or patterns that download and execute scripts from external URLs (e.g.,curl | bash), were detected in the skill's scripts or instructions. - [SAFE]: The skill does not access sensitive system files (such as SSH keys or AWS credentials) and does not perform any network operations to non-whitelisted domains, maintaining data privacy within the local workspace.
- [SAFE]: The agent instructions in
agents/*.mdare well-structured and focused on the intended tasks of synthesis and organization, with no attempts to bypass safety filters or override system constraints.
Audit Metadata