Meditate
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user conversation history to generate reflections and insights, which creates a potential surface for indirect prompt injection from malicious content embedded in the user's history.
- Ingestion points: Conversation history is read to identify patterns and topics (SKILL.md).
- Boundary markers: There are no specified delimiters or 'ignore' instructions for the ingested history data.
- Capability inventory: File system write access is restricted to the specific local directory '~/Clawic/data/meditate/' (SKILL.md). No network or system-wide command capabilities are present.
- Sanitization: The skill does not describe any sanitization or validation of the ingested conversation history data.
- [COMMAND_EXECUTION]: The skill includes a shell command for the agent to execute during initial setup to create the necessary local directory structure.
- Evidence: The 'memory-template.md' file instructs the agent to run 'mkdir -p ~/Clawic/data/meditate/archive' on first use.
Audit Metadata