gaia-wiki — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gaia-wiki (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run the GAIA wiki maintenance workflow with these arguments: $ARGUMENTS
This command rewrites tracked wiki/ content and its state file for the whole repository, and lands them through a pull request of its own. It starts from the main checkout (the clone's primary working directory, on any branch) and isolates its own work before its first write, through .claude/skills/gaia/references/isolation.md, so it never writes onto the branch the checkout holds. A linked worktree holds someone else's work, so it refuses to run from one. Run this first, before anything else; a non-zero exit is the refusal: relay it and stop.
. .gaia/scripts/main-only-lib.sh
gaia_refuse_if_worktree "/gaia-wiki" || exit 1Anchor for the next pre-flight step: a check that must pass before this command starts goes here, after the worktree check and before the workflow dispatch line.
. .gaia/scripts/main-only-lib.sh
gaia_pull_gate "/gaia-wiki"On a non-zero exit, read .claude/skills/update-gaia/references/pull-gate.md and follow it with /gaia-wiki, this run's original arguments and the exit code, before anything below creates a branch, worktree, claim or SPEC id.
Read .claude/skills/gaia/references/wiki.md from the project root and follow it exactly.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.