skills/hxy9243/skills/wiki/Gen Agent Trust Hub

wiki

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses a local Python package (wikicli) for its core logic, ensuring that sensitive operations like indexing and searching are performed by deterministic code rather than purely by language model inference.
  • [SAFE]: Robust security controls are implemented in src/wikicli/notebook.py for handling file paths. The Note.resolve_source and Note.normalize_source methods use Path.resolve() and relative_to() to strictly enforce that all file operations remain within the configured notebook directory, effectively preventing path traversal vulnerabilities.
  • [SAFE]: No remote code execution vectors, such as eval(), exec(), or patterns that download and execute scripts from external URLs (e.g., curl | bash), were detected in the skill's scripts or instructions.
  • [SAFE]: The skill does not access sensitive system files (such as SSH keys or AWS credentials) and does not perform any network operations to non-whitelisted domains, maintaining data privacy within the local workspace.
  • [SAFE]: The agent instructions in agents/*.md are well-structured and focused on the intended tasks of synthesis and organization, with no attempts to bypass safety filters or override system constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 07:05 AM