devonthink
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to generate and execute shell commands for the
devonthinkCLI utility. It allows the agent to perform actions such as searching records, modifying record properties, and deleting records within the local DEVONthink database. - [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to install the
devonthinkpackage from npm and add plugins from thedvcrn/devonthink-climarketplace repository. These are recognized as legitimate vendor resources associated with the skill author. - [PROMPT_INJECTION]: A surface for indirect prompt injection exists because the skill includes tools that ingest data from untrusted external sources.
- Ingestion points: The
create_from_urlcommand (SKILL.md) fetches data from arbitrary URLs, and theask_ai_about_documentscommand (references/examples.md) processes the content of local documents. - Boundary markers: There are no instructions provided to the agent to use delimiters or ignore instructions embedded within the data retrieved from URLs or documents.
- Capability inventory: The agent has the capability to perform file system operations and database mutations (create, update, delete) based on the processed data.
- Sanitization: No sanitization or validation logic is specified for the external content before it is processed by the AI model.
Audit Metadata