skills/kouko/monkey-skills/wiki-query/Gen Agent Trust Hub

wiki-query

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a retrieval-augmented generation (RAG) workflow to query local Markdown files within an Obsidian vault. All operations are confined to the local file system and use standard Python libraries.
  • [COMMAND_EXECUTION]: The skill invokes a local, bundled Python script (scripts/query-frontmatter.py) to perform search operations. This script is controlled, standard-library based, and does not accept unvalidated shell input.
  • [COMMAND_EXECUTION]: Testing code in tests/test_query_frontmatter.py uses subprocess.run() to execute the skill's own script for verification. This is a standard development practice and is executed within a controlled test environment.
  • [SAFE]: File access is restricted to the specified wiki vault path. The skill reads Markdown files and updates a local cache file (wiki/hot.md) as part of its documented functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 05:05 PM
Security Audit — agent-trust-hub — wiki-query