soia-pkm-query-vault
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The search implementation in
query_vault.pyfollows the principle of least privilege by strictly limiting file access. It ignores hidden directories (e.g.,.git,.obsidian,.ssh), configuration files, and symbolic links, effectively preventing directory traversal or unauthorized access to system-level data. - [EXTERNAL_DOWNLOADS]: The skill instructions specify installation via the
soia-teamorganization's official packages usingnpxand the Claude plugin marketplace. These are documented vendor delivery channels and do not utilize unverified or suspicious external sources. - [COMMAND_EXECUTION]: The provided usage examples demonstrate localized execution of the vault query script. The script itself uses safe argument parsing and does not exhibit patterns that would allow for arbitrary shell command injection or privilege escalation.
Audit Metadata