Wiki.js CLI

• Outcome: Pass
• Latest audit: Jul 10, 2026 · 4:32 AM UTC
• Version: 1.4.0

Overview

This is a powerful but clearly documented Wiki.js administration skill, with no artifact-backed evidence of hidden or malicious behavior.

Install only if you want an agent or CLI to administer your Wiki.js instance. Use a least-privilege Wiki.js API token, protect ~/.config/wikijs.json, prefer HTTPS, review destructive and bulk actions before approving them, and upload only files you intentionally want published to Wiki.js.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (7)

Context-Inappropriate Capability

Medium

• Confidence: 89% confidence
• Finding: This file exposes a broad set of powerful content-management operations including create, update, move, delete, restore, upload, and system querying, despite no stated scope restriction or purpose. In an agent skill context, this materially increases blast radius: if the skill is invoked unexpectedly, misused by another component, or prompted into unsafe actions, it can modify or destroy remote Wiki.js content and upload local files.

Context-Inappropriate Capability

Medium

• Confidence: 85% confidence
• Finding: The getHealth function retrieves sensitive system metadata such as config file location, hostname, operating system, platform, and version information. Even if intended for diagnostics, this information aids reconnaissance by revealing environment details that can help an attacker tailor follow-on attacks or identify high-value targets.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: deletePage performs irreversible remote content deletion with no confirmation, approval checkpoint, or safety interlock in this file. In an agent setting, accidental invocation, prompt-driven misuse, or chained-tool abuse could cause immediate loss of documentation or records at scale.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: uploadAsset reads an arbitrary local file path and transmits the file contents to a remote server, with no user-facing disclosure or path restriction in this file. In an agent environment, this is a serious data-exfiltration primitive because any accessible local file could be uploaded if an attacker influences the filePath input.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: deleteAsset removes remote assets by ID without any confirmation or safety guard in this file. This creates a straightforward destructive capability that could be triggered accidentally or through prompt/tool misuse, leading to broken references, data loss, or service disruption.

Known Vulnerable Dependency: axios==1.6.0 — 10 advisory(ies): CVE-2026-44494 (axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `co); CVE-2026-44495 (axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollut); CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF) +7 more

High

• Category: Supply Chain
• Confidence: 94% confidence
• Finding: This package manifest includes axios 1.6.0, which is flagged with multiple known advisories, including SSRF-related and prototype-pollution-associated issues. In a CLI that likely makes network requests to Wiki.js instances, vulnerable HTTP client behavior can materially increase the risk of request manipulation, proxy bypass, credential exposure, or abuse of trusted network paths depending on how the library is used elsewhere in the project.

Known Vulnerable Dependency: form-data==4.0.0 — 2 advisory(ies): CVE-2025-7783 (form-data uses unsafe random function in form-data for choosing boundary); CVE-2026-12143 (form-data: CRLF injection in form-data via unescaped multipart field names and f)

Critical

• Category: Supply Chain
• Confidence: 97% confidence
• Finding: This manifest references form-data 4.0.0, which is flagged for unsafe boundary generation and CRLF injection in multipart field handling. For a CLI that may upload files or content to Wiki.js, vulnerable multipart construction can enable request smuggling or header/body injection effects and weaken confidentiality or integrity of transmitted data.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.