supernote-mystyle
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/sync_export.pycontains a dynamic import of thetimemodule. This is used solely for the purpose of calculating a time cutoff to filter exported files by their modification date, which is a standard utility function and does not pose a security risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data fromspec.json,event.json, and vision-processed labels from exported note images. Boundary markers are absent, but the skill's capabilities are limited to generating images and performing normalized text replacement in Markdown files viasync_export.pyandmake_template.py. The matching logic includes sanitization that strips non-alphanumeric characters, and no command execution pathways are exposed.\n- [EXTERNAL_DOWNLOADS]: The documentation references a GitHub repository (github.com/mphinance/are-we-there-yet) belonging to the author. This is a reference to a vendor resource for optional synchronization and does not involve automated downloads or execution of untrusted remote code.
Audit Metadata