review
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands including
ls,cat,head, anddateto manage and retrieve information from local directories (Projects/andDaily/). These operations are consistent with the skill's stated purpose of managing personal reviews and notes. - [EXTERNAL_DOWNLOADS]: The skill interacts with a local API service at
http://127.0.0.1:8090. While it performs both GET (retrieving tasks) and POST (creating tasks) requests, these operations are restricted to the local machine and are used for task management functionality. - [PROMPT_INJECTION]: There is a surface for indirect prompt injection as the skill reads content from local markdown files and external API responses to generate summaries and plan daily tasks. However, this is a standard functional requirement for a review skill and no specific malicious injection patterns were found in the provided files.
Audit Metadata