journal-reflection
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill establishes a functional framework for personal reflection, providing specific question sets for daily, weekly, and decision-based reviews.
- [DATA_EXPOSURE]: The skill refers to a local filesystem path (
C:/Users/AGasser/OneDrive/Ane Obsidian Vault). While this exposes a username, it is necessary for the skill's primary function of writing to an Obsidian vault and matches the author's identity, indicating legitimate usage. - [INDIRECT_PROMPT_INJECTION]: The skill processes user responses and writes them into markdown files, creating a potential ingestion surface.
- Ingestion points: User-provided answers to reflection prompts (SKILL.md).
- Boundary markers: The skill uses YAML frontmatter and H2 headers to delimit content.
- Capability inventory: The skill uses platform-provided tools for writing and editing local files.
- Sanitization: Not explicitly defined for user-supplied prose, although content is formatted as standard markdown.
- [COMMAND_EXECUTION]: The skill invokes 'Write' and 'Edit' tools to manage files within the specified vault directory. It includes a specific protocol to ensure that existing content in the files is preserved during updates.
Audit Metadata