desk-open
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for managing project-specific directories (desks/) and logging work history. The behavior is consistent with standard project organization workflows and shows no signs of malicious intent, obfuscation, or unauthorized access to system resources.
- [SAFE]: The skill establishes a mechanism for session continuity using a local journal file. While this technically creates a surface for indirect prompt injection if the file were to be manipulated by an external actor, it is a legitimate local state management pattern. 1. Ingestion points: desks//journal.md is read at the start of a session. 2. Boundary markers: No specific delimiters or safety warnings are included in the instructions. 3. Capability inventory: Basic local directory creation and file writing. 4. Sanitization: No sanitization is specified for the desk name or the content written to the journal.
Audit Metadata