daily-briefing
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute several local commands. It uses
dateto capture the current timestamp,icalBuddyto retrieve calendar events, andosascriptto run AppleScripts located in.claude/skills/for accessing system emails and reminders. - [EXTERNAL_DOWNLOADS]: The skill specifies a requirement for
ical-buddy, directing the user to install it via the Homebrew package manager usingbrew install ical-buddy. This is a well-known utility for accessing macOS calendar data from the command line. - [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection because it processes untrusted data from external sources (emails and calendar events) that are later analyzed by the agent.
- Ingestion points: Data enters the context from the outputs of
scan_inbox.scpt,list_tasks.scpt, andicalBuddy, which can contain arbitrary text from emails or calendar invites. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions potentially embedded within the retrieved data.
- Capability inventory: The skill possesses
Bashtool capabilities, which allow it to execute commands and scripts on the local system. - Sanitization: The instructions do not define any sanitization or validation logic for the content retrieved from the inbox or calendar before it is summarized by the model.
Audit Metadata