second-brain-ingest
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns were identified. The skill's logic is restricted to reading, writing, and organizing local files within a defined wiki structure.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing untrusted data from the
raw/directory. * Ingestion points: Source files in theraw/directory are read in full. * Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used. * Capability inventory: The skill has access toBash,Read,Write,Edit,Glob, andGreptools. * Sanitization: The content of source files is not sanitized or validated before processing.
Audit Metadata