vault-wiki
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses terminal-based operations such as
rm -rffor bulk removal of wiki directories andsha256sumfor verifying the integrity of ingested source material.\n- [COMMAND_EXECUTION]: Utilizespython3 -cas a helper to parse JSON data retrieved from external sources, specifically during the processing of long-form articles from X (Twitter).\n- [EXTERNAL_DOWNLOADS]: Fetches content from external web URLs and social media platforms via tools likeweb_extractandxurlto populate the user's local wiki.\n- [EXTERNAL_DOWNLOADS]: Conducts freshness checks by pulling repository metadata and README files from GitHub to notify the user of updates to previously ingested sources.\n- [PROMPT_INJECTION]: The skill processes untrusted external data (web articles, X posts), creating a surface for indirect prompt injection. This risk is mitigated by the structured ingest workflow which focuses on synthesis and human-reviewed filing.\n - Ingestion points: External URLs, social media posts, and vault inbox files (as described in
references/ingest-workflow.md).\n - Boundary markers: Missing specific instructions to ignore embedded commands within the ingested raw text.\n
- Capability inventory: File read/write/delete access via TurboVault tools and general terminal execution for hashing and deletion.\n
- Sanitization: Relies on the agent's summarization process; no programmatic filtering of the raw source content is performed before saving it to the vault.
Audit Metadata