skills/karlorz/llm-wiki/wiki-archive/Gen Agent Trust Hub

wiki-archive

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes command-line operations using skillwiki, git, and rclone. These operations include local file system moves (git mv), repository commits, and the deletion of remote files to prune stale storage paths.
  • [EXTERNAL_DOWNLOADS]: The instructions reference a remote storage target seaweed-wiki:cloud/wiki for use with synchronization and pruning commands. While consistent with the archiving purpose, it involves network interaction with a project-specific remote endpoint.
  • [PROMPT_INJECTION]: The skill is subject to potential indirect prompt injection because it parses content from vault files to update references.
  • Ingestion points: The skill reads wiki page content, specifically citation markers (^[raw/...]) and sources: frontmatter, during the archiving of raw files (Step 5).
  • Boundary markers: There are no explicit delimiters or instructions to ignore potential commands embedded within the wiki files being processed.
  • Capability inventory: The agent can move files, push to private repositories, and delete remote files using rclone deletefile.
  • Sanitization: No validation or sanitization of the citation markers or path strings is specified before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 11:30 AM
Security Audit — agent-trust-hub — wiki-archive