project-wiki-manager
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a mandatory
Sanitization PolicyandPre-Capture Checkthat strictly prohibits the storage of environment variables, API tokens, passwords, and private identifiers in project wiki artifacts.- [COMMAND_EXECUTION]: TheSKILL.mdprovides instructions for running local validation and linting scripts located in the platform's system directories ($CODEX_HOME/skills/.system/), which is standard for development workflows.- [PROMPT_INJECTION]: The skill ingests data from local documents and user-provided artifacts to create persistent memory, representing an indirect prompt injection surface. Ingestion points: Reads from existing documents via tools likeobsidian-wiki-ingest. Boundary markers: None explicitly defined for the generated wiki artifacts. Capability inventory: Writing durability facts and context packs to the local file system. Sanitization: Mitigated by mandatory secret-redaction and fact-labeling protocols (User-provided,Source-backed, etc.).
Audit Metadata