wiki-sync
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs standard CLI utilities such as
git,rsync,sha256sum, anddiffto manage repository state, detect peer sessions, and synchronize files. - [COMMAND_EXECUTION]: Invokes a local maintenance script (
~/.hermes/scripts/wiki-snapshot.sh) to handle specific architectural patterns involving rclone mounts and git snapshotting. - [EXTERNAL_DOWNLOADS]: Performs
git pulloperations to retrieve vault updates from remote origins. - [DATA_EXFILTRATION]: Uses
git pushto upload local vault modifications to remote repositories as part of its documented synchronization logic. - [PROMPT_INJECTION]: Ingests potentially untrusted data from the vault, such as file content and git logs, during synchronization and conflict resolution. This creates an indirect prompt injection surface, although this behavior is required for the skill's functional purpose.
Audit Metadata