.fyi
SkillsMCPPluginsSubagents

Browse by category

DevOps & CI/CD SkillsProductivity & Workflow SkillsOther SkillsProduct & Project Management SkillsDocumentation & Knowledge SkillsCode Review & Refactor SkillsBackend & APIs SkillsAgent Meta & Communication SkillsResearch SkillsSecurity SkillsUX UI & Design SkillsTesting & QA SkillsSee all →

Every Claude Code skill, MCP server, plugin and subagent in one directory. Searchable, comparable, and one command from installed. Live stats from GitHub, npm and PyPI.

We're on Product HuntYour agent's app storeCheck it out →
Agent SkillsMCP ServersPluginsSubagentsCoding Agents
CollectionsOfficial publishersGlossaryFAQBlogSearchSavedFeedback
PrivacyTermsllms.txtSitemap

made with ♥ · © 2026 aaaa.fyi

Independent project · real data from public registries

…/wiki-capture/security
home/skills/wiki-capture/security
ar9av avatar

wiki-capture — security audits

Passed all audits

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

  • Gen Agent Trust Hub

    pass

    This skill is designed to capture conversation content and save it as structured markdown files within a local Obsidian vault. It correctly utilizes local configuration for path resolution. However, the skill processes untrusted user chat data and persists it to a local file store without sanitization or boundary markers, which presents a surface for indirect prompt injection.

    Risk: SAFEPROMPT_INJECTIONMay 18, 2026Full report
  • Socket

    pass

    No alerts

    May 18, 2026Full report
  • Snyk

    pass

    Risk: LOW · No issues

    Risk: LOWMay 18, 2026Full report