wiki-merge
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes 'python bin/generate-index.py' and 'git commit' to manage the wiki index and record operations. These commands are executed locally within the user's workspace.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection. Ingestion points: Untrusted content is read from wiki page files ('wiki/pages/*.md') during the merge and split processes. Boundary markers: There are no explicit instructions or delimiters to prevent the agent from following instructions embedded within the wiki pages it reads. Capability inventory: The skill has file system write/delete permissions and can execute local python and git commands. Sanitization: There is no validation or escaping of the ingested page content before it is processed or re-written to other files.
Audit Metadata