enrich-notes-loop-cloud

Pass

Audited by Gen Agent Trust Hub on Jul 7, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to synchronize an Obsidian vault.
  • Evidence: Uses ob sync-config and ob sync to pull and push vault data.
  • Context: This is the primary intended functionality of the skill for cloud-based automation.
  • [PROMPT_INJECTION]: There is an inherent risk of indirect prompt injection due to processing external data.
  • Ingestion points: Reads user-controlled note content from the ~/vault directory in SKILL.md.
  • Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the processing logic.
  • Capability inventory: The skill has the ability to execute shell commands (ob) and call the enrich-notes-loop skill.
  • Sanitization: No sanitization of note content is performed before the enrichment process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 7, 2026, 02:57 AM
Security Audit — agent-trust-hub — enrich-notes-loop-cloud