daily-brief
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user inputs and external MCP servers (Calendar and Email) to generate a briefing.
- Ingestion points: Data is ingested via user prompts and external MCP tool outputs (Calendar/Email) in
SKILL.md. - Boundary markers: The instructions lack explicit delimiters or instructions to ignore commands embedded within the fetched data.
- Capability inventory: The skill does not define any tools, subprocess calls, or network operations; it is purely instructional.
- Sanitization: No sanitization or validation of external data is specified before it is included in the briefing.
- [NO_CODE]: The skill consists entirely of natural language instructions and YAML frontmatter. There are no scripts, binaries, or executable components present.
Audit Metadata