Rapport d’audit du skill
wiki-knowledge-agent Rapport d’audit.
Turn chat-pasted text/links into a verified, translated, searchable wiki knowledge base. When a user pastes a link or text (in ANY channel — Discord, Slack, CLI, etc.), fetch+verify it, classify it (useful vs ad), translate+summarize it into the target language, save it to the wiki, and optionally alert on time-sensitive information. Also acts as a RAG channel: agents search the wiki for prior knowledge. Use whenever the user pastes content for archiving, asks to save a link/bookmark, asks '알림 있어?', 'any alerts?', or asks the agent to look up knowledge saved in the wiki.
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adoption GitHub
Échoué30
19 stars GitHub
Activité stars/forks
Échoué32
19 stars et 6 forks; l’activité des issues n’est pas disponible dans les métadonnées actuelles
Maintenance récente
Validé88
1 mois depuis le dernier push
Clarté de licence
Validé86
MIT
Complétude README/SKILL.md
Validé86
Les métadonnées incluent suffisamment de contexte d’usage et de workflow
Risque dépendances/runtime
Avertissement46
command execution surface, credential or environment access
Disponibilité de l’installation
Validé92
npx skills add atukunare/wiki-knowledge-agent --skill wiki-knowledge-agent
Sécurité de la commande d’installation
Validé92
Chemin d’installation standard de package ou runtime
Surface de permissions
Échoué22
secrets or environment access, shell or command execution
Preuve du dépôt
Validé86
https://github.com/atukunare/wiki-knowledge-agent/blob/main/SKILL.md
État de revue
Info66
Données de revue IA disponibles
Résultats prouvés par Agent
Info54
Pas encore de données de résultats Agent
Vérifications
Revue d’installation et d’adoption
Chemin d’installation
92
npx skills add atukunare/wiki-knowledge-agent --skill wiki-knowledge-agent
Dépôt
88
https://github.com/atukunare/wiki-knowledge-agent/blob/main/SKILL.md
Licence
86
MIT
Maintenance
88
1 mois depuis le dernier push
Revue IA
55
SKILL.md does not explicitly address prompt-injection risks from pasted or fetched content, even though the skill allows the LLM to classify, summarize, and optionally update config.
Complétude README/SKILL.md
86
Usable description available
Risque de dépendances
46
command execution surface, credential or environment access
Sécurité de la commande d’installation
92
Chemin d’installation standard de package ou runtime
Surface de permissions
22
secrets or environment access, shell or command execution
Activité stars/forks
32
19 stars et 6 forks; l’activité des issues n’est pas disponible dans les métadonnées actuelles
Adoption
42
19 stars GitHub
Avertissements
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- SKILL.md does not explicitly address prompt-injection risks from pasted or fetched content, even though the skill allows the LLM to classify, summarize, and optionally update config.
- The skill instructs fetching user-supplied URLs but does not define safe URL boundaries, such as blocking private/internal IP ranges or stripping credentials from URLs.
- The excerpted skill directory does not clearly include referenced scripts (scripts/ingest.py, scripts/onboarding.py) and reference files; confirm they are present in the repository or the SKILL.md pointers will be broken.
- SKILL.md lacks a dedicated limitations/safety section describing what the skill will not do, such as refusing instructions embedded in saved content or requiring confirmation before sending notifications.
- Low GitHub adoption signal
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- GitHub adoption: 19 GitHub stars
- Stars/forks activity: 19 stars, 6 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, credential or environment access
Méthode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.