wagneripjr/okf-maintain
Adopt and maintain an Open Knowledge Format v0.2 documentation bundle: frontmatter, generated indexes, a fail-closed conformance check, and coverage that names every unindexed document
92
93%
Does it follow best practices?
Impact
91%
1.71xAverage score across 3 eval scenarios
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow processes repository files, including markdown documents and manifest files authored by repository users, which may contain untrusted outsider-authored free text.
Where we found it
repository markdown and manifest files (user-owned content)
content-type · 4 sites
The plugin reads local repository files (markdown documents and manifest files) as part of its workflow, which the scanner flags as potentially containing untrusted outsider-authored content.
scripts/okf.mjs
335
readDoc function reads local markdown files
scripts/okf.mjs
171
declaredProfile reads docs/okf.yaml or okf.yaml
scripts/okf.mjs
838
trackedMarkdown executes git ls-files locally
scripts/okf.mjs
417
walk function traverses local repository directories
- Audited
- Security analysis