Daily Planner
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's operations are consistent with its primary purpose of daily planning and commitment tracking. It utilizes a local storage path (~/planner/) for configuration and history, which is a standard practice for persistent agent state.
- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface as it ingests untrusted data from external sources such as emails and calendar events to generate daily briefings (documented in routines.md).
- Ingestion points: The agent pulls calendar events and emails to populate the morning briefing and time-blocked schedules.
- Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings when processing these external data points.
- Capability inventory: The skill performs file-write operations to the local filesystem (~/planner/).
- Sanitization: No explicit sanitization or validation of external content is described before interpolation into the agent's context.
Audit Metadata