cronometer-diary
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user dictation which is used to perform actions in the Cronometer web interface, creating a surface for indirect prompt injection.
- Ingestion points: Raw user dictation input as described in the 'Dictation Parsing' section of SKILL.md.
- Boundary markers: Absent; the instructions do not specify delimiters or tell the agent to ignore instructions embedded within the food descriptions.
- Capability inventory: Interaction with the Cronometer diary UI, including search, configuration of amounts, and execution of the 'ADD TO DIARY' action.
- Sanitization: Absent; no filtering or escaping of user input is described.
- [NO_CODE]: The skill does not contain any executable scripts, binaries, or configuration for external package managers, consisting entirely of Markdown instructions and data tables.
Audit Metadata