dumc-email-to-obsidian-notes
Warn
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: Accesses a specific local path containing authentication tokens:
~/.hermes/csu-teams-graph-token.json. - [COMMAND_EXECUTION]: Relies on executing CLI tools such as
himalayaand system shell commands for mail retrieval and file management. - [PROMPT_INJECTION]: Vulnerable to indirect prompt injection from the body of external emails, which may contain malicious instructions for the agent.
- Ingestion points: Email bodies and metadata retrieved from Microsoft Graph and Himalaya/Gmail as described in
references/session-email-review-workflow.md. - Boundary markers: None used; the skill lacks delimiters or guidance to ignore instructions within the source data.
- Capability inventory: Writing to the local Obsidian vault, reading files, and executing shell commands.
- Sanitization: Missing logic to sanitize or escape untrusted content before it is processed into summaries.
Audit Metadata