daily-update

Warn

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: MEDIUMPERSISTENCEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [PERSISTENCE]: The skill automates the creation of scheduled background tasks using crontab, systemd user timers (~/.config/systemd/user/), and launchd agents (~/Library/LaunchAgents/) to execute scripts daily.
  • [PERSISTENCE]: Modifies user shell profile files (.bashrc, .zshrc) by appending source commands that execute scripts from the local repository every time a terminal session starts.
  • [PRIVILEGE_ESCALATION]: Interacts with system service managers (launchctl, systemctl) to load, enable, and start background agents and timers.
  • [COMMAND_EXECUTION]: Executes local shell scripts (daily-update.sh) and system utilities (sed, crontab, systemctl, launchctl) to configure the environment.
  • [DYNAMIC_EXECUTION]: Generates system configuration files (.plist, .service) at runtime by interpolating environment variables into templates via sed before installation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from vault markdown pages and configuration files to generate indices and activity summaries.
  • Ingestion points: Reads .manifest.json and all markdown files within the user's Obsidian vault to determine freshness and content snapshots.
  • Boundary markers: No explicit delimiters or instructions are documented to prevent embedded instructions in vault pages from influencing the hot.md summary generation.
  • Capability inventory: Significant capabilities including shell script execution, service manipulation, and file writes to system configuration paths.
  • Sanitization: Content from vault pages is passed directly to the AI for takeaway generation without documented sanitization or escaping.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 6, 2026, 01:26 AM