project-wiki
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-focused tool that manages project knowledge through markdown files in a
wiki/directory andAGENTS.md. It does not execute remote code or exfiltrate data. - [SAFE]: Explicit safety rules prevent the agent from installing third-party packages, generating application scaffold code, or performing automated git commits, limiting the tool's impact to documentation.
- [COMMAND_EXECUTION]: The skill uses local Git commands (
git init,git status,git diff) for repository initialization and auditing. These commands are standard for development and are used purely for information gathering within the local workspace. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) by ingesting untrusted data from repository manifests, source files, and git diffs. It attempts to mitigate this using boundary markers (managed block comments like
PROJECT-WIKI-BOOTSTRAPPER:START), a limited capability set (writing markdown and runninggit init), and instructions to preserve user content and avoid inventing certainty.
Audit Metadata