x9-okf-docs
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
subprocess.runto interact with system utilities.\n scripts/check_dependencies.py: Executesrubyto verify environmental requirements.\nscripts/insert_frontmatter.py: Executesgitcommands to retrieve file metadata and commit history.\nscripts/okf_yaml.py: Executes an embedded Ruby script to ensure high-fidelity, strict YAML parsing of document frontmatter, passing data via standard input to avoid shell injection.\n- [PROMPT_INJECTION]: The skill processes Markdown and YAML content from the repository, which serves as an indirect prompt injection surface.\n- Ingestion points: Reads
.mdfiles within the workspace to extract and update metadata fields (scripts/insert_frontmatter.py,scripts/validate_okf.py).\n - Boundary markers: Uses
---delimiters and performs structural validation of the YAML block.\n - Capability inventory: Includes file read/write operations and execution of
gitandrubybinaries.\n - Sanitization: Employs
YAML.safe_loadwithin the Ruby parser and validates specific metadata fields against a strict schema to prevent malicious data from influencing agent behavior.
Audit Metadata