llm-wiki-update
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and follow instructions from
AGENTS.mdand other repository source files. This creates a surface where repository content could theoretically influence the agent's behavior during the wiki update process. - Ingestion points:
AGENTS.md, existingllm-wiki/content, and repository source files (referenced inSKILL.md). - Boundary markers: The skill instructions suggest preserving boundaries between raw source and synthesis, but do not define explicit delimiters for instruction-following.
- Capability inventory: The agent is authorized to write to
llm-wiki/**and executegit diff --check -- llm-wiki(referenced inSKILL.md). - Sanitization: No specific sanitization methods are listed for content extracted from repository files, though the scope is restricted to the wiki directory.
- [COMMAND_EXECUTION]: The skill utilizes
git diff --check -- llm-wikito validate changes before reporting. This is a standard validation command that operates on a specific directory, presenting minimal risk in this context.
Audit Metadata