evernote-incident-runbook

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute diagnostic commands, including curl for service status verification, grep for log analysis, and jq for processing structured data.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external system logs, creating a potential surface where malicious payloads embedded in logs could influence agent behavior.
  • Ingestion points: The skill reads from /var/log/evernote-app.log using grep in SKILL.md.
  • Boundary markers: There are no explicit delimiters or instructions provided to distinguish between diagnostic data and instructions.
  • Capability inventory: The skill has access to file system operations (Read, Write, Edit), shell execution (Bash), and network capabilities via curl and Node.js https snippets.
  • Sanitization: Log data is processed and interpreted without specified validation or sanitization steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:44 AM