nb
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill correctly uses the
nbCLI tool for managing notes, todos, and bookmarks without including malicious scripts or obfuscated code. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external note storage which could potentially contain untrusted instructions.
- Ingestion points: Note content retrieved via
nb list,nb show, andnb searchas described inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are provided for retrieved note content.
- Capability inventory: The skill can write files (
nb add,nb edit), execute CLI commands, and perform network synchronization (nb sync). - Sanitization: No specific sanitization or validation of note content is defined before processing.
Audit Metadata