soia-pkm-organize-article-moc

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local Python scripts (rebuild_moc.py, organize_env.py) to manage Obsidian vault files. These scripts perform standard file operations (read, write, and directory management) confined to the directory path provided by the user via the OBSIDIAN_VAULT environment variable or command-line arguments. The scripts use shlex.quote to safely handle environment variables, mitigating shell injection risks.
  • [EXTERNAL_DOWNLOADS]: The skill provides installation instructions pointing to the soia-team GitHub organization and the official Claude plugin marketplace. These are recognized vendor resources associated with the skill's author and do not involve untrusted third-party domains.
  • [DATA_EXFILTRATION]: No network activity or external data transmission logic was found. The skill's operations are strictly local to the user's filesystem.
  • [PROMPT_INJECTION]: The skill incorporates a structured set of guidelines (references/知识库整理规程.yml) that mandates a "detective-first" (read-only discovery) phase and user approval for proposed changes. These instructions act as a safety framework to prevent the agent from making autonomous, destructive changes without user oversight.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 08:47 AM
Security Audit — agent-trust-hub — soia-pkm-organize-article-moc