remindme
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code or unauthorized data access patterns were detected. The skill performs natural language parsing and schedules tasks using standard platform-provided tools.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it captures user-provided text for future delivery. This is inherent to the skill's purpose and is mitigated by platform-level isolation.
- Ingestion points: User input is parsed in
SKILL.mdto extract the message content. - Boundary markers: The scheduled payload in
SKILL.mdandreferences/TEMPLATES.mduses a "REMINDER: " prefix for the message. - Capability inventory: The skill invokes the
cron.addtool to scheduleagentTurnpayloads. - Sanitization: No explicit sanitization or escaping of the user's message is performed before it is scheduled.
Audit Metadata