start-my-day
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and summarizes external research papers from arXiv and Semantic Scholar APIs. If an attacker were to publish a paper with a malicious abstract designed to influence LLM behavior, the agent could be manipulated during the summarization process. \n
- Ingestion points: The
scripts/search_arxiv.pyscript retrieves paper metadata (titles, authors, abstracts) from external network sources. \n - Boundary markers: The skill defines structured templates for its output but does not utilize explicit delimiters or 'ignore instructions' directives for the external abstract content being processed. \n
- Capability inventory: The skill has the ability to read from and write to the user's Obsidian vault, and to make external network calls to research APIs. \n
- Sanitization: While the scripts use structured parsing (XML/JSON), there is no specific sanitization of the abstract text to prevent instruction injection. \n- [COMMAND_EXECUTION]: The
SKILL.mdinstruction file contains shell logic tosourcethe user's interactive shell profiles (~/.zshrcor~/.bash_profile) to resolve environment variables likeOBSIDIAN_VAULT_PATH. While useful for configuration, this involves executing local scripts with the agent's privileges.
Audit Metadata