skills/mimukit/skills/wikikit/Gen Agent Trust Hub

wikikit

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The publish.md mode installs the Andrew-Chen-Wang/github-wiki-action@v5 GitHub Action. This introduces an external dependency from a repository that is not on the trusted organizations list.- [COMMAND_EXECUTION]: The skill uses Bash to run allowlisted probes such as <command> --help and <command> --version against project binaries. It also executes git, gh, and perl for repository management and content transformation.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted project data (source code, configuration files, and ADRs) to generate documentation. While it uses boundary markers (<!-- wikikit:front-door:start -->) for README updates and verifies commands against the repo, the broad ingestion of external code to drive documentation content represents an attack surface for indirect prompt injection.- [DYNAMIC_EXECUTION]: The skill generates a GitHub Actions workflow containing a shell script and a Perl one-liner used for link rewriting and path flattening. This script construction and scheduled execution in a CI environment constitutes a form of dynamic script generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 06:38 PM