notes
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes user-provided transcription data to generate metadata and observations.
- Ingestion points: Transcription content provided by the user in
instructions/transcription.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the transcription text when generating metadata.
- Capability inventory: The skill utilizes
Obsidian:write_note,Obsidian:read_note,Obsidian:patch_note, andObsidian:search_notestools. - Sanitization: The instructions explicitly require the transcription body to be preserved verbatim without modification or sanitization.
- [COMMAND_EXECUTION]: The skill performs shell-based configuration and environment setup during its initial execution.
- Evidence: The agent is instructed to use
mkdir,ln -s, andprintfto create a global configuration at~/.config/wrap-up/vaultand local project symlinks inreferences/bootstrap.md. - Evidence: The skill uses
git rev-parse --show-toplevelto resolve the current project root inreferences/mapping.md. - Purpose: These operations are limited to establishing and maintaining the project-to-vault registry system.
Audit Metadata