morning-briefing
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git log --since="yesterday" --onelineto retrieve commit history from active repositories. This is a read-only operation used solely for generating the briefing content. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from user-controlled files (vault notes, project documentation) and git commit messages which may contain malicious instructions designed to influence the briefing's output.
- Ingestion points: Files located in
~/broomva-vault/and output fromgit log. - Boundary markers: None present; the skill treats all ingested text as data for summarization.
- Capability inventory: Includes file system read/write access (to the vault and journal) and command-line execution (
git). - Sanitization: No explicit sanitization or filtering of the ingested content is defined.
Audit Metadata