okf-wiki-setup
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/okf_setup.pyutilizes thesubprocessmodule to execute system-level commands. - It executes
git initto initialize the target directory for version control, which is a core requirement of the framework. - It executes the local
validate_governance.pyscript using the current Python interpreter (sys.executable) to verify the structure of existing vaults. - The environment for these calls is carefully managed, and target paths are validated to ensure they do not escape the intended vault directory.
- [INDIRECT_PROMPT_INJECTION]: The skill manages a workflow where user input from a questionnaire is used to populate template files.
- Ingestion points: User answers (vault name, language, sensitivity settings) are passed into the setup script via a temporary JSON file.
- Boundary markers: The skill uses template placeholders (e.g.,
{{vault_name}}) for interpolation. - Capability inventory: The script has capabilities to write files, create directories, and initialize Git repositories within the local filesystem.
- Sanitization: The code includes a robust
require_safe_targetfunction that prevents path traversal by checking for symlinks and verifying that all target paths resolve within the lexical boundaries of the vault.
Audit Metadata