second-brain-ideate

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill performs localized text analysis on a specified wiki directory using standard shell utilities. It adheres to the principle of least privilege by not requesting network access or broad file system permissions beyond the designated wiki and output paths.
  • [PROMPT_INJECTION]: The skill processes user-generated markdown files in the local wiki/ directory, which creates a surface for indirect prompt injection where content in those files could attempt to influence the agent's behavior.
  • Ingestion points: The skill reads markdown files across wiki/concepts/, wiki/entities/, and wiki/synthesis/ folders, as well as wiki/log.md and wiki/index.md.
  • Boundary markers: No explicit delimiters or instructions are used when reading files to ensure the agent ignores embedded commands.
  • Capability inventory: The skill uses Bash (grep, sed, sort, tail) for text filtering and Read, Write, and Edit for local file operations.
  • Sanitization: Content from the wiki is used for scoring and ideation patterns without prior sanitization or validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 05:07 PM
Security Audit — agent-trust-hub — second-brain-ideate