soia-pkm-extract-vault-knowledge
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill employs a local Python script (
scripts/knowledge_manifest.py) to coordinate the extraction process. This script is built using standard libraries and incorporates strict path confinement logic to ensure file operations do not escape the designated vault directory. - [DATA_EXFILTRATION]: To protect against accidental exposure of sensitive data, the skill includes automated scanning logic. This feature uses regular expressions to detect and block the extraction of potential secrets, such as API keys, tokens, passwords, and private system paths (
/Users/,/home/). - [COMMAND_EXECUTION]: All filesystem interactions are governed by a cryptographic verification system (SHA-256) and atomic file operations to prevent race conditions or data corruption during the knowledge transition process.
Audit Metadata