journal-entry-prep
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data sources (journal entry inputs, search results, and scraped data) which could contain malicious instructions.
- Ingestion points: The skill inspects available files, runtime, versions, and inputs provided by the user (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings for external data.
- Capability inventory: The skill utilizes network-enabled tools (sandbase_run) to perform search, scraping, and model inference (references/sandbase-api-map.md).
- Sanitization: There are no explicit instructions for sanitizing or escaping external content before processing or passing it to external tools.
Audit Metadata