wiki-stage-commit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
obsidian-wikicommand-line tool to perform vault operations, including listing staged files and promoting them to the live wiki. These commands are executed via the shell in steps 1 and 3. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes untrusted content generated by other agents.
- Ingestion points: The skill reads the content of files located in the
_staging/directory to provide summaries, previews, and diffs to the user in Step 2. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands within the staged content are defined in the workflow.
- Capability inventory: The skill can execute CLI commands, modify the wiki's live pages through merges, and update tracking files such as
hot.mdandlog.md. - Sanitization: There is no evidence of sanitization, validation, or escaping of the external content before it is displayed or merged into the wiki.
Audit Metadata