plan-day
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill follows security best practices by resolving file paths through configuration variables (e.g.,
layout.daily_dir) rather than using hardcoded system paths. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from 'weekly review' notes to identify priority tasks.
- Ingestion points: Sibling markdown files within the user's vault (e.g., weekly reviews, daily notes).
- Boundary markers: Absent; the skill does not explicitly define delimiters for external note content.
- Capability inventory: The agent is limited to reading and writing markdown files within the configured vault directory. No network access, command execution, or system-level privileges are requested.
- Sanitization: None detected; however, the
ROLE.mdfile enforces a 'secretary' stance requiring explicit human 'grants' for material state changes, which acts as a logical control against unintended actions triggered by data content.
Audit Metadata