deepwiki
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to configure an MCP server using a remote endpoint at
https://mcp.deepwiki.com/mcporhttps://mcp.deepwiki.com/sse. These are well-known service endpoints for the DeepWiki tool described. - [INDIRECT_PROMPT_INJECTION]: The skill provides tools such as
read_wiki_contentsandask_questionthat ingest and process documentation from external, user-specified GitHub repositories. This represents a potential surface for indirect prompt injection if the source repository contains malicious instructions, though this is inherent to the skill's primary purpose of repository analysis.
Audit Metadata