obsidian-weekly-summary

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content from local daily notes which could theoretically contain malicious instructions.
  • Ingestion points: Reads markdown files from the ~/Code/personal/obsidian/zettelkasten/06 Daily/ directory.
  • Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the daily notes.
  • Capability inventory: The skill utilizes the Read tool for file access and Bash for executing local commands (Python and Obsidian CLI).
  • Sanitization: No sanitization or escaping is applied to the content of the notes before they are processed into the summary.
  • [COMMAND_EXECUTION]: The skill executes local commands to handle date calculations and file creation.
  • Evidence: Uses python3 -c to calculate the start and end dates of the current week.
  • Evidence: Uses a local obsidian CLI command to create new files based on a template.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:14 AM