wiki-archive
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes command-line operations using
skillwiki,git, andrclone. These operations include local file system moves (git mv), repository commits, and the deletion of remote files to prune stale storage paths. - [EXTERNAL_DOWNLOADS]: The instructions reference a remote storage target
seaweed-wiki:cloud/wikifor use with synchronization and pruning commands. While consistent with the archiving purpose, it involves network interaction with a project-specific remote endpoint. - [PROMPT_INJECTION]: The skill is subject to potential indirect prompt injection because it parses content from vault files to update references.
- Ingestion points: The skill reads wiki page content, specifically citation markers (
^[raw/...]) andsources:frontmatter, during the archiving of raw files (Step 5). - Boundary markers: There are no explicit delimiters or instructions to ignore potential commands embedded within the wiki files being processed.
- Capability inventory: The agent can move files, push to private repositories, and delete remote files using
rclone deletefile. - Sanitization: No validation or sanitization of the citation markers or path strings is specified before they are processed by the agent.
Audit Metadata