kb-lint
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed as a utility for auditing and maintaining a local folder structure (PARA vault). Its behavior is consistent with its stated purpose of improving knowledge base organization.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes user-provided markdown files to perform its checks.
- Ingestion points: Vault documents located in PARA directories (Projects, Areas, Resources, Archive) are read during the linting process in
SKILL.md. - Boundary markers: None identified; the skill treats vault content as data to be parsed for structural patterns.
- Capability inventory: The skill has file-write capabilities (updating
_index.md, adding tags to file frontmatter, and appending to0. Common/log.md) when the--fixargument is used. - Sanitization: No explicit sanitization or filtering of external content is specified before processing or interpolating data into reports.
Audit Metadata