end-of-day
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local
obsidianCLI tool to perform file operations, including reading tasks, listing files in the Sessions folder, and appending content to daily notes. These operations are limited to the local environment. - [DATA_EXPOSURE]: The skill accesses the user's local Obsidian notes and task lists to generate a summary. This data stays within the local environment and is used to fulfill the skill's stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from local files (daily notes and session files) which could theoretically contain malicious instructions.
- Ingestion points: SKILL.md (Step 1) reads data via
obsidian daily:readand other CLI commands. - Boundary markers: None explicitly defined for the ingested file content.
- Capability inventory: The skill can write to files using
obsidian daily:append. - Sanitization: No specific sanitization or escaping is mentioned for the ingested content before it is processed by the agent. However, as the source is the user's personal vault, the risk is considered minimal.
Audit Metadata