morning-brief
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes the GitHub CLI (
gh issue list) to retrieve open issues assigned to the user. This is a standard operation used to populate the work items section of the brief. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted data from external sources.
- Ingestion points: Processes data from external trackers (GitHub and Linear) and files in the
~/Obsidian/Inbox/directory. - Boundary markers: The skill uses markdown headers and checklist formats for the output brief but does not implement explicit delimiters or warnings to ignore instructions within the ingested data.
- Capability inventory: The skill is capable of reading and writing markdown files in the local filesystem and executing CLI tools for issue tracking.
- Sanitization: There is no evidence of explicit sanitization or filtering of the task descriptions before they are written to the daily brief file.
Audit Metadata