wiki-auto-research
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
mkdir -pcommand to ensure that the designated research directory exists on the local filesystem before writing output. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
WebSearchtool to perform outbound network requests for information gathering. This is the primary function of the skill and is preceded by a step where the user must approve the research plan and estimated search volume. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it reads untrusted data from local wiki files (Step 1) to identify research topics. The risk is mitigated by explicit user confirmation steps at Step 3 (plan approval) and Step 5e (progress updates), and the fact that results are written to separate research notes rather than directly merged into the wiki.
- Ingestion points: Local wiki files (
wiki/directory). - Boundary markers: None specified in the reading instructions.
- Capability inventory:
WebSearch(network),mkdir, file writing (research/), and file appending (wiki/log.md). - Sanitization: Not explicitly implemented; relies on human review of the generated research notes.
Audit Metadata