spaced-recall
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's logic is restricted to reading and writing local Markdown files within the designated .ai/learning/ directory. No network operations or external data fetching are performed.
- [DATA_EXPOSURE]: Access is limited to study notes and review queues. The skill does not access sensitive system directories, credentials, or environment variables.
- [COMMAND_EXECUTION]: No shell commands, subprocesses, or dynamic code execution patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-generated Markdown files (Cornell notes). While this presents an ingestion surface for data processing, the skill lacks high-risk capabilities—such as network exfiltration or shell execution—that would be required to weaponize an injection found within study notes.
Audit Metadata