wiki-enrich
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several shell-based tools to manage the local wiki environment.
- Executes
git rev-parseto resolve the repository root. - Uses
awkandgrepto parse project configuration files and discover candidate wiki pages. - Invokes a local Python script (
research_wiki.py) to perform logging and rebuild the query pack. - Dynamically interpolates user-provided arguments into a bash array for file targeting, which is a potential injection point if arguments are not strictly validated.
- [EXTERNAL_DOWNLOADS]: Fetches paper information from well-known academic services.
- Uses
WebFetchto download summaries fromalphaxiv.org(e.g.,alphaxiv.org/overview/<arxiv_id>.md). - Uses
curlto fetch XML metadata from the official arXiv API (export.arxiv.org). - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by ingesting and processing untrusted data from the web.
- Ingestion points: External text is fetched from
alphaxiv.organdarxiv.org(Step 2.3). - Boundary markers: Absent; there are no instructions to the agent to ignore potential malicious instructions embedded within the fetched paper summaries.
- Capability inventory: The agent possesses
WriteandEdittool permissions, which it uses to modify local markdown files based on the processed external content. - Sanitization: Absent; the skill relies on the LLM to summarize the fetched content directly into the wiki sections.
Audit Metadata