Fabric
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill synchronizes its local pattern library with the author's official GitHub repository (github.com/danielmiessler/fabric) using git and rsync.
- [COMMAND_EXECUTION]: The skill utilizes system utilities such as git, rsync, and bun for pattern management and knowledge harvesting. It also executes curl commands to send status notifications to a local endpoint (localhost:31337).
- [DATA_EXFILTRATION]: Summarization workflows include a side-effect that passes user-provided content to a local harvesting tool (harvest.ts) for knowledge management.
- [PROMPT_INJECTION]: Patterns use detailed personas to orientation agent behavior. The skill acts as an ingestion surface for untrusted external data (YouTube transcripts, articles) which is processed by the AI without explicit sanitization or boundary markers.
Audit Metadata