wiki-plan
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx dot-wikiandnpx skillscommands to perform version checks, manage tool updates, and update the project's 'wiki focus' manifest.- [EXTERNAL_DOWNLOADS]: The skill contains logic in the preamble to check for and install updates for thedev-goraebap/dot-wikipackage from the npm registry vianpx.- [PROMPT_INJECTION]: The skill processes user-provided feature descriptions to generate structured PRD files, creating a surface for indirect prompt injection. - Ingestion points: User-provided feature descriptions and existing PRD files in the
.wiki/common/directory. - Boundary markers: The skill does not use specific delimiters or markers to isolate user-provided content within the generated PRD template.
- Capability inventory: Shell command execution via
npx dot-wikiandnpx skillsis available to the agent. - Sanitization: No explicit validation or escaping of user input is performed before the content is written to the file system.
Audit Metadata