Laporan audit skill
wiki-knowledge-agent Laporan audit.
Turn chat-pasted text/links into a verified, translated, searchable wiki knowledge base. When a user pastes a link or text (in ANY channel — Discord, Slack, CLI, etc.), fetch+verify it, classify it (useful vs ad), translate+summarize it into the target language, save it to the wiki, and optionally alert on time-sensitive information. Also acts as a RAG channel: agents search the wiki for prior knowledge. Use whenever the user pastes content for archiving, asks to save a link/bookmark, asks '알림 있어?', 'any alerts?', or asks the agent to look up knowledge saved in the wiki.
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adopsi GitHub
Gagal30
19 star GitHub
Aktivitas star/fork
Gagal32
19 star dan 6 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Pemeliharaan terbaru
Lulus88
1 bulan sejak push
Kejelasan lisensi
Lulus86
MIT
Kelengkapan README/SKILL.md
Lulus86
Metadata memuat konteks penggunaan dan alur kerja yang cukup
Risiko dependensi/runtime
Peringatan46
command execution surface, credential or environment access
Ketersediaan pemasangan
Lulus92
npx skills add atukunare/wiki-knowledge-agent --skill wiki-knowledge-agent
Keamanan perintah pemasangan
Lulus92
Jalur pemasangan paket atau runtime standar
Cakupan izin
Gagal22
secrets or environment access, shell or command execution
Bukti repositori
Lulus86
https://github.com/atukunare/wiki-knowledge-agent/blob/main/SKILL.md
Status peninjauan
Info66
Data tinjauan AI tersedia
Hasil terbukti Agent
Info54
Belum ada data hasil Agent
Pemeriksaan
Tinjauan pemasangan dan adopsi
Jalur pemasangan
92
npx skills add atukunare/wiki-knowledge-agent --skill wiki-knowledge-agent
Repositori
88
https://github.com/atukunare/wiki-knowledge-agent/blob/main/SKILL.md
Lisensi
86
MIT
Pemeliharaan
88
1 bulan sejak push
Tinjauan AI
55
SKILL.md does not explicitly address prompt-injection risks from pasted or fetched content, even though the skill allows the LLM to classify, summarize, and optionally update config.
Kelengkapan README/SKILL.md
86
Usable description available
Risiko dependensi
46
command execution surface, credential or environment access
Keamanan perintah pemasangan
92
Jalur pemasangan paket atau runtime standar
Cakupan izin
22
secrets or environment access, shell or command execution
Aktivitas star/fork
32
19 star dan 6 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Adopsi
42
19 star GitHub
Peringatan
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- SKILL.md does not explicitly address prompt-injection risks from pasted or fetched content, even though the skill allows the LLM to classify, summarize, and optionally update config.
- The skill instructs fetching user-supplied URLs but does not define safe URL boundaries, such as blocking private/internal IP ranges or stripping credentials from URLs.
- The excerpted skill directory does not clearly include referenced scripts (scripts/ingest.py, scripts/onboarding.py) and reference files; confirm they are present in the repository or the SKILL.md pointers will be broken.
- SKILL.md lacks a dedicated limitations/safety section describing what the skill will not do, such as refusing instructions embedded in saved content or requiring confirmation before sending notifications.
- Low GitHub adoption signal
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- GitHub adoption: 19 GitHub stars
- Stars/forks activity: 19 stars, 6 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, credential or environment access
Metode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.