distill-to-atomic-notes
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external inputs such as sources and transcripts, which constitutes an attack surface for indirect prompt injection if those sources contain malicious instructions.
- Ingestion points: The skill processes 'raw capture', 'sources', and 'transcripts' as mentioned in the description and procedure in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or guardrails to ignore instructions embedded within the processed data.
- Capability inventory: None. The skill file contains no executable code, tool definitions, or shell commands.
- Sanitization: No sanitization or filtering of input content is specified.
- [NO_CODE]: The skill is composed entirely of markdown instructions and metadata. It does not include any executable scripts (Python, JavaScript, shell), configuration files for tool execution, or binaries.
Audit Metadata