anki-vocab
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely on local text files to manage vocabulary learning. It reads contextual information from files like
mission.mdandvocabulary.mdto generate Anki-compatible text files.\n- [PROMPT_INJECTION]: The skill has an ingestion surface for indirect prompt injection as it reads from external files (mission.md,path.md,vocabulary.md,review-queue.md) that may contain untrusted data.\n - Ingestion points: Content is pulled from
mission.md,path.md,vocabulary.md, andreview-queue.mdto construct sentences.\n - Boundary markers: None identified in the prompt instructions to distinguish between skill instructions and ingested data content.\n
- Capability inventory: Limited to writing plain text files (
.txt) in theanki/directory and appending entries to markdown files (.md). No network access or shell execution capabilities are present.\n - Sanitization: The skill does not specify explicit sanitization or filtering of the ingested content, though it does avoid using specific separators like semicolons within fields.
Audit Metadata