project-wiki-manager

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements a mandatory Sanitization Policy and Pre-Capture Check that strictly prohibits the storage of environment variables, API tokens, passwords, and private identifiers in project wiki artifacts.- [COMMAND_EXECUTION]: The SKILL.md provides instructions for running local validation and linting scripts located in the platform's system directories ($CODEX_HOME/skills/.system/), which is standard for development workflows.- [PROMPT_INJECTION]: The skill ingests data from local documents and user-provided artifacts to create persistent memory, representing an indirect prompt injection surface. Ingestion points: Reads from existing documents via tools like obsidian-wiki-ingest. Boundary markers: None explicitly defined for the generated wiki artifacts. Capability inventory: Writing durability facts and context packs to the local file system. Sanitization: Mitigated by mandatory secret-redaction and fact-labeling protocols (User-provided, Source-backed, etc.).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 07:31 AM
Security Audit — agent-trust-hub — project-wiki-manager