okf-wiki-setup

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/okf_setup.py utilizes the subprocess module to execute system-level commands.
  • It executes git init to initialize the target directory for version control, which is a core requirement of the framework.
  • It executes the local validate_governance.py script using the current Python interpreter (sys.executable) to verify the structure of existing vaults.
  • The environment for these calls is carefully managed, and target paths are validated to ensure they do not escape the intended vault directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill manages a workflow where user input from a questionnaire is used to populate template files.
  • Ingestion points: User answers (vault name, language, sensitivity settings) are passed into the setup script via a temporary JSON file.
  • Boundary markers: The skill uses template placeholders (e.g., {{vault_name}}) for interpolation.
  • Capability inventory: The script has capabilities to write files, create directories, and initialize Git repositories within the local filesystem.
  • Sanitization: The code includes a robust require_safe_target function that prevents path traversal by checking for symlinks and verifying that all target paths resolve within the lexical boundaries of the vault.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 12:06 PM