wikikit
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
publish.mdmode installs theAndrew-Chen-Wang/github-wiki-action@v5GitHub Action. This introduces an external dependency from a repository that is not on the trusted organizations list.- [COMMAND_EXECUTION]: The skill usesBashto run allowlisted probes such as<command> --helpand<command> --versionagainst project binaries. It also executesgit,gh, andperlfor repository management and content transformation.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted project data (source code, configuration files, and ADRs) to generate documentation. While it uses boundary markers (<!-- wikikit:front-door:start -->) for README updates and verifies commands against the repo, the broad ingestion of external code to drive documentation content represents an attack surface for indirect prompt injection.- [DYNAMIC_EXECUTION]: The skill generates a GitHub Actions workflow containing a shell script and a Perl one-liner used for link rewriting and path flattening. This script construction and scheduled execution in a CI environment constitutes a form of dynamic script generation.
Audit Metadata