define
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected in the skill instructions.
- [PROMPT_INJECTION]: The skill reads existing note content, which presents a surface for indirect prompt injection if notes contain malicious instructions. However, the risk is mitigated by explicit constraints that restrict the agent to only replacing the "#define-later" tag without modifying other parts of the document.
- [COMMAND_EXECUTION]: The skill utilizes standard file search and read tools (Grep/Glob) to locate and process notes. These are routine operations for managing local markdown files.
Audit Metadata