clean-transcript
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
monologueCLI tool to search (monologue notes all) and retrieve (monologue notes get) user notes. This execution is scoped to the tool's intended use for transcript management and is triggered based on user descriptions. - [INDIRECT_PROMPT_INJECTION]: As the skill processes external transcript data, there is a potential surface for indirect prompt injection. The skill implements several safeguards against this:
- Ingestion points: Transcripts provided via pasted text, file uploads, or retrieved from
monologuenotes (SKILL.md). - Boundary markers: The instructions use structured sections to separate processing rules from the source data, treating the source as 'evidence'.
- Capability inventory: The agent can invoke the
monologueCLI tool to interact with the user's notes. - Sanitization: Explicit instructions to 'preserve claims, intent, tone' and 'never fill an inaudible passage' serve as functional constraints against the agent following instructions embedded within the transcript text.
- [SAFE]: The skill includes a specific security instruction to 'never request or accept an API token in chat', directing users to use the
monologue onboardingcommand in their own terminal instead. This follows established best practices for secret management.
Audit Metadata