distill-my-life
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXPOSURE]: The skill accesses highly sensitive user activity logs, including screen usage data and audio transcripts, by invoking the
luciCLI to generate daily summaries. - [DATA_EXFILTRATION]: Distilled summaries of user activity are sent to external connectors as specified in local configuration files (
~/.Life/CLAUDE.mdor~/.Life/AGENTS.md). This allows sensitive personal data to be transmitted to external endpoints. - [COMMAND_EXECUTION]: The skill executes shell commands (e.g.,
date,bash, and PowerShell snippets) to calculate Unix timestamps and interacts with the host system via theluciCLI tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from external sources during the distillation process.
- Ingestion points: Raw text from screen captures (
luci usage) and audio transcripts (luci transcript) inSKILL.mdStep 2. - Boundary markers: The instructions mandate an "objective" tone and a specific YAML/Markdown schema, but there are no technical delimiters to prevent the agent from interpreting text within transcripts as new instructions.
- Capability inventory: File system read/write access in the user home directory, shell command execution, and network communication through configured external connectors.
- Sanitization: No sanitization or filtering is performed on the transcript or screen data before processing.
- [PERSISTENCE]: The skill modifies the
luci-config.jsonapplication configuration file to inject a notification object (first-distill), which ensures a specific message is displayed to the user when the Luci application is next opened.
Audit Metadata