wiki-preset

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to update local configuration files (.wiki/wiki-manifest.yaml and .wiki/CONVENTIONS.md) based on predefined templates. It includes explicit safety instructions to prevent data loss, such as not deleting existing directories or overwriting specific data fields (documents and profiles).
  • [DATA_EXPOSURE]: Access is limited to project-specific metadata and documentation within the .wiki directory. No access to sensitive system files, environment variables, or credentials was detected.
  • [COMMAND_EXECUTION]: The skill suggests directory structure adjustments but does not involve executing arbitrary shell commands or subprocesses. It performs path checks and YAML parsing which are routine operations for configuration management.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface where user input (preset name) is used to construct a file path (references/presets/{preset}.yaml). While this is a theoretical injection point for path traversal, the instructions explicitly restrict the selection to four safe, predefined options, and the skill's impact is localized to the wiki project environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 10:37 AM