start-my-day
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted paper titles and abstracts from external academic databases. A maliciously crafted paper could attempt to influence the agent's behavior during the summary generation process.
- Ingestion points: Paper metadata is fetched from arXiv and Semantic Scholar APIs via
scripts/search_arxiv.py. - Boundary markers: No explicit delimiters are used to wrap the external paper summaries when they are interpolated into the generated markdown notes.
- Capability inventory: The skill can write files to the local filesystem (Obsidian vault) and invoke other agent skills for deep paper analysis.
- Sanitization: While the skill sanitizes filenames to prevent path traversal, it does not filter paper abstracts for instruction-like patterns.
- [COMMAND_EXECUTION]: The skill sources local shell configuration files (
~/.zshrcand~/.bash_profile) within its bash scripts to resolve theOBSIDIAN_VAULT_PATHenvironment variable. This is a routine practice for developer-oriented tools to maintain user context.
Audit Metadata