decision-journal
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The
scripts/install-cli.mjsscript installs a persistent wrapper for theagent-journalCLI in the user's~/.local/bindirectory. This is a standard setup procedure for local tools to ensure the command remains available across terminal sessions and for automated hook execution. - [INDIRECT_PROMPT_INJECTION]: The skill implements 'Authoring Floors' which generate dynamic prompts for the agent based on session activity and tool observations.
- Ingestion Points: Data is ingested from the observation plane, specifically
tool_callandtool_resultevents processed by thefloorcommand. - Boundary Markers: The generated prompt text does not use specific delimiters to separate observed tool data from instructions.
- Capability Inventory: The skill is granted
Read,Write,Grep,Glob, andBashpermissions to manage local journal files and execute the provided CLI scripts. - Sanitization: The CLI includes a dedicated redaction engine (
src/redact.ts) that uses regular expressions to mask common secret patterns (API keys, tokens, JWTs, and private keys) before they are committed to the journal storage. - [EXTERNAL_DOWNLOADS]: The documentation in
references/adapters.mdrefers to the author's GitHub repository atgithub.com/crissmoldovan/agent-skillsto obtain adapters for various agent harnesses. This is documented as a vendor-provided resource for expanding the skill's capabilities. - [COMMAND_EXECUTION]: The CLI tool performing the journaling logic uses standard file system operations to manage local
.jsonlsegment files within the~/.agents/journal/directory. The installation script also utilizeschmodandrenameto set up the CLI wrapper locally.
Audit Metadata