review

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard shell commands including ls, cat, head, and date to manage and retrieve information from local directories (Projects/ and Daily/). These operations are consistent with the skill's stated purpose of managing personal reviews and notes.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with a local API service at http://127.0.0.1:8090. While it performs both GET (retrieving tasks) and POST (creating tasks) requests, these operations are restricted to the local machine and are used for task management functionality.
  • [PROMPT_INJECTION]: There is a surface for indirect prompt injection as the skill reads content from local markdown files and external API responses to generate summaries and plan daily tasks. However, this is a standard functional requirement for a review skill and no specific malicious injection patterns were found in the provided files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:08 PM