para-second-brain
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled file content, such as AGENTS.md files, to perform project health checks and organization tasks. This creates an ingestion surface for indirect prompt injection, where malicious instructions could be embedded in the user's files.
- Ingestion points: The scripts/validate.sh script and the agent process files located in the directory provided by the user.
- Boundary markers: No specific delimiters or safety instructions are used to separate user data from agent instructions during processing.
- Capability inventory: The skill has the ability to read and write files and execute a local bash script for validation.
- Sanitization: No explicit sanitization of file content is performed before processing or summarizing findings.
Audit Metadata