start-my-day

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted paper titles and abstracts from external academic databases. A maliciously crafted paper could attempt to influence the agent's behavior during the summary generation process.
  • Ingestion points: Paper metadata is fetched from arXiv and Semantic Scholar APIs via scripts/search_arxiv.py.
  • Boundary markers: No explicit delimiters are used to wrap the external paper summaries when they are interpolated into the generated markdown notes.
  • Capability inventory: The skill can write files to the local filesystem (Obsidian vault) and invoke other agent skills for deep paper analysis.
  • Sanitization: While the skill sanitizes filenames to prevent path traversal, it does not filter paper abstracts for instruction-like patterns.
  • [COMMAND_EXECUTION]: The skill sources local shell configuration files (~/.zshrc and ~/.bash_profile) within its bash scripts to resolve the OBSIDIAN_VAULT_PATH environment variable. This is a routine practice for developer-oriented tools to maintain user context.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 02:29 AM
Security Audit — agent-trust-hub — start-my-day