wiki-query
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for knowledge retrieval and synthesis from a user-managed wiki. It includes explicit safety instructions that prevent the agent from scanning root directories or user home folders, which protects sensitive system and configuration files from accidental exposure.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local wiki pages to generate answers, creating a surface for potential indirect prompt injection if the ingested notes contain instructions intended to override the agent's behavior. This risk is inherent to the primary purpose of reading user-provided content.
- Ingestion points: The skill reads
index.md,Overview.md, and specific markdown files targeted during the search workflow inSKILL.md. - Boundary markers: There are no explicit instructions for the agent to ignore commands or use specific delimiters when processing the content of wiki pages.
- Capability inventory: The skill requires filesystem read access for knowledge gathering and filesystem write access for logging queries and creating new wiki pages at the user's request.
- Sanitization: The skill does not implement text sanitization or instruction filtering for the content read from wiki files.
Audit Metadata