second-brain-ideate
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs localized text analysis on a specified wiki directory using standard shell utilities. It adheres to the principle of least privilege by not requesting network access or broad file system permissions beyond the designated wiki and output paths.
- [PROMPT_INJECTION]: The skill processes user-generated markdown files in the local
wiki/directory, which creates a surface for indirect prompt injection where content in those files could attempt to influence the agent's behavior. - Ingestion points: The skill reads markdown files across
wiki/concepts/,wiki/entities/, andwiki/synthesis/folders, as well aswiki/log.mdandwiki/index.md. - Boundary markers: No explicit delimiters or instructions are used when reading files to ensure the agent ignores embedded commands.
- Capability inventory: The skill uses
Bash(grep, sed, sort, tail) for text filtering andRead,Write, andEditfor local file operations. - Sanitization: Content from the wiki is used for scoring and ideation patterns without prior sanitization or validation.
Audit Metadata