evernote-migration-deep-dive
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The file
SKILL.mdutilizes the dynamic context injection pattern!npm list 2>/dev/null | head -5. This command executes at skill load time to display the current environment's package information. In this implementation, the command is benign and serves as a diagnostic or environment check. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data from the Evernote API and local migration files.
- Ingestion points: Data is ingested through API responses and file reads in
migration/evernote-exporter.jsandmigration/evernote-importer.js. - Boundary markers: The instructions and code include format conversion logic (ENML to Markdown) which implicitly handles data structure, though specific security delimiters are not present.
- Capability inventory: The skill is granted
Read,Write,Edit, andBashcapabilities, which are used to manage the file-based migration workflow. - Sanitization: The implementation includes a
sanitizeNamefunction for file paths and anenmlToMarkdownfunction that strips XML/HTML tags during content conversion.
Audit Metadata