journal-reflection

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill establishes a functional framework for personal reflection, providing specific question sets for daily, weekly, and decision-based reviews.
  • [DATA_EXPOSURE]: The skill refers to a local filesystem path (C:/Users/AGasser/OneDrive/Ane Obsidian Vault). While this exposes a username, it is necessary for the skill's primary function of writing to an Obsidian vault and matches the author's identity, indicating legitimate usage.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user responses and writes them into markdown files, creating a potential ingestion surface.
  • Ingestion points: User-provided answers to reflection prompts (SKILL.md).
  • Boundary markers: The skill uses YAML frontmatter and H2 headers to delimit content.
  • Capability inventory: The skill uses platform-provided tools for writing and editing local files.
  • Sanitization: Not explicitly defined for user-supplied prose, although content is formatted as standard markdown.
  • [COMMAND_EXECUTION]: The skill invokes 'Write' and 'Edit' tools to manage files within the specified vault directory. It includes a specific protocol to ensure that existing content in the files is preserved during updates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:41 PM