wiki-lint
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple subcommands of the
skillwikiCLI, includingpath,health,lint, andlog-rotate. These commands are used to analyze vault data and perform maintenance tasks. Thelog-rotateandlint --fixcommands are gated by user consent or specific security exceptions. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it instructs the agent to read and reason over the output of vault health and lint reports, which are derived from potentially untrusted user content within the vault.
- Ingestion points: Data is ingested from the output of
skillwiki health <vault> --out /tmp/skillwiki-health.jsonandskillwiki lint <vault> --summaryin SKILL.md. - Boundary markers: The instructions do not define specific boundary markers or delimiters for the agent to use when parsing the JSON envelope or lint summaries.
- Capability inventory: The agent has the ability to execute shell commands via the
skillwikitool, including commands that modify the filesystem likelog-rotate --applyandlint --fix --only sensitive_content. - Sanitization: No sanitization or instruction-filtering is applied to the data retrieved from the vault before the agent performs reasoning (Step 4).
Audit Metadata