monologue-notes-api
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to
https://api.monologue.tousingcurl. This is the official API endpoint for the Monologue service and matches the author's vendor domain, representing intended functionality for a notes-reading skill. - [DATA_EXFILTRATION]: The skill contains a reference to a local filesystem path (
/Users/eleanor/repos/obsidian/intellectronica/...) within the 'Source Notes' metadata section. This describes the author's development environment for documentation purposes and does not instruct the agent to access the user's local files. - [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes untrusted text data (note titles, summaries, and transcripts) from an external REST API, which could potentially contain malicious instructions.
- Ingestion points: External data enters the agent context via
GETrequests toapi.monologue.todefined inSKILL.md. - Boundary markers: No delimiters or 'ignore' instructions are specified for the fetched note content.
- Capability inventory: The skill has network access via
curland JSON processing capabilities viajq. - Sanitization: The skill does not implement sanitization, filtering, or validation of the text content retrieved from the API before the agent processes it.
Audit Metadata