mochi-srs
Pass
Audited by Gen Agent Trust Hub on Jun 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a custom Python CLI tool (
bin/mochi) to perform operations such as fetching due cards and submitting review results. This is the primary mechanism for the skill's functionality. - [EXTERNAL_DOWNLOADS]: The
bin/mochiscript performs network requests tohttps://app.mochi.cards/apifor synchronizing with the Mochi service. This communication is restricted to the official API endpoint required for the tool's functionality. - [PROMPT_INJECTION]: The skill processes flashcard content, creating an ingestion surface for potential indirect prompt injection.
- Ingestion points: Flashcard content is fetched from the Mochi API and local database via the
mochi next,mochi new, andmochi getcommands inbin/mochi. - Boundary markers: Absent. The skill instructions do not explicitly require the use of delimiters for card content.
- Capability inventory: The skill can execute local commands, write to the local file system (appending mnemonics to cards), and perform network operations via the Mochi API using the
mochiCLI script. - Sanitization: Absent. Flashcard content is processed and displayed as retrieved from the database or API.
Audit Metadata