remnote-flashcard-designer

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [NO_CODE]: The skill consists entirely of markdown instructions and examples. It does not include any scripts, executables, or automated tool configurations.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted source material provided by users to generate study cards. While this represents a theoretical ingestion surface for indirect prompt injection, the skill possesses no capabilities (such as network access, file system writes, or subprocess execution) that could be leveraged for malicious purposes.
  • Ingestion points: SKILL.md ("Turn the requested material into a small set of cards").
  • Boundary markers: Absent.
  • Capability inventory: None. The skill provides guidelines only and does not invoke tools or scripts.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 07:36 PM