wiki-research — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  fail

  The skill performs autonomous research and saves data to an Obsidian vault. It accesses local environment and configuration files which may contain sensitive credentials. It also processes external web content, making it susceptible to indirect prompt injection where malicious websites could manipulate the agent's behavior or the content written to the vault.

  Risk: HIGHDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTIONMay 18, 2026Full report

• Socket

  pass

  No alerts

  May 18, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · 1 issue

  Risk: MEDIUMMay 18, 2026Full report