wiki-dashboard
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
qmdCLI (or an overridden path inQMD_CLI) to update and verify a search index after vault writes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user's Obsidian vault (
index.md) to understand vault structure, which creates a potential surface for indirect prompt injection. - Ingestion points: Reading
$OBSIDIAN_VAULT_PATH/index.md(SKILL.md, Step 2). - Boundary markers: None specified for file ingestion.
- Capability inventory: File write operations to
.base,.md, andlog.mdfiles; execution ofqmdCLI commands (update,embed,ls,get). - Sanitization: None mentioned for processing external markdown content.
Audit Metadata