vault-health
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands to perform diagnostics, including
nodefor automated health checks,launchctlfor managing system services, andfindfor file system audits. - [CREDENTIALS_UNSAFE]: The troubleshooting procedures instruct the agent to read integration tokens directly from local environment configuration files using
grepto verify their validity. - [PERSISTENCE]: The skill interacts with the macOS
launchdsystem to monitor and manage the state of background synchronization jobs stored in~/Library/LaunchAgents/. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The agent reads and processes an auto-generated health report and samples content from user-owned markdown files in the notes vault.
- Boundary markers: There are no explicit delimiters or instructions for the agent to ignore potentially malicious content embedded within the vault files or generated reports.
- Capability inventory: The skill has access to shell execution (
node,launchctl,curl), extensive file system read access, and network capabilities. - Sanitization: No sanitization or validation of the input data from the vault or report files is specified before the agent evaluates the content.
Audit Metadata