daily-recap
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts, specifically
extract_today.pyandobsidian-helper.py, using theuv runcommand. These scripts are bundled with the skill and perform necessary tasks such as parsing local session logs and managing the Obsidian diary integration. - [DATA_EXFILTRATION]: The skill accesses local agent session files in
~/.piand~/.ompand transmits metadata/summaries via thenmemsynchronization tool to aggregate activity across multiple machines. This behavior is consistent with the skill's primary stated purpose of cross-machine session aggregation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes conversational data from agent sessions which could potentially contain untrusted instructions.
-
- Ingestion points: Reads local
.jsonlsession files and remote thread content retrieved via thenmem_read_threadtool.
- Ingestion points: Reads local
-
- Boundary markers: The instructions do not provide explicit delimiters or specific warnings for the agent to ignore embedded instructions within the ingested session content.
-
- Capability inventory: The skill has the capability to write files to the Obsidian vault and execute local Python scripts.
-
- Sanitization: No explicit sanitization, escaping, or filtering of the ingested session text is implemented before it is processed for the daily summary.
Audit Metadata