llm-wiki
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill does not exhibit any malicious patterns or security threats. It incorporates defensive instructions to prevent accidental access to sensitive files and directories.
- [EXTERNAL_DOWNLOADS]: The skill mentions legitimate third-party utilities, including
defuddlefor content extraction andobsidian-headlessfor vault synchronization. These tools are recommended for specific, documented user workflows. - [COMMAND_EXECUTION]: Shell commands are used for functional purposes, such as querying academic metadata via
curlto Semantic Scholar and managing local synchronization services withsystemctl. These actions are contextual and user-directed. - [PROMPT_INJECTION]: The skill acknowledges the risk of processing untrusted external sources and mitigates it by requiring the agent to restate information in its own words and verify claims through a multi-step ingestion process.
Audit Metadata