daily-update
Warn
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: MEDIUMPERSISTENCEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill automates the creation of scheduled background tasks using
crontab,systemduser timers (~/.config/systemd/user/), andlaunchdagents (~/Library/LaunchAgents/) to execute scripts daily. - [PERSISTENCE]: Modifies user shell profile files (
.bashrc,.zshrc) by appendingsourcecommands that execute scripts from the local repository every time a terminal session starts. - [PRIVILEGE_ESCALATION]: Interacts with system service managers (
launchctl,systemctl) to load, enable, and start background agents and timers. - [COMMAND_EXECUTION]: Executes local shell scripts (
daily-update.sh) and system utilities (sed,crontab,systemctl,launchctl) to configure the environment. - [DYNAMIC_EXECUTION]: Generates system configuration files (.plist, .service) at runtime by interpolating environment variables into templates via
sedbefore installation. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from vault markdown pages and configuration files to generate indices and activity summaries.
- Ingestion points: Reads
.manifest.jsonand all markdown files within the user's Obsidian vault to determine freshness and content snapshots. - Boundary markers: No explicit delimiters or instructions are documented to prevent embedded instructions in vault pages from influencing the
hot.mdsummary generation. - Capability inventory: Significant capabilities including shell script execution, service manipulation, and file writes to system configuration paths.
- Sanitization: Content from vault pages is passed directly to the AI for takeaway generation without documented sanitization or escaping.
Audit Metadata