evernote-incident-runbook
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute diagnostic commands, includingcurlfor service status verification,grepfor log analysis, andjqfor processing structured data. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external system logs, creating a potential surface where malicious payloads embedded in logs could influence agent behavior.
- Ingestion points: The skill reads from
/var/log/evernote-app.logusinggrepinSKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to distinguish between diagnostic data and instructions.
- Capability inventory: The skill has access to file system operations (
Read,Write,Edit), shell execution (Bash), and network capabilities viacurland Node.jshttpssnippets. - Sanitization: Log data is processed and interpreted without specified validation or sanitization steps.
Audit Metadata