qec-notes
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from user-supplied sources and external links.
- Ingestion points: Readings, excerpts, and URLs provided as sources in SKILL.md.
- Boundary markers: Absent; the instructions do not explicitly direct the agent to disregard instructions that may be contained within the source material.
- Capability inventory: The skill mentions the ability to call external notes tools or the Scratchpad connector (SKILL.md).
- Sanitization: Absent; no input validation or sanitization logic is described for the processed sources.
- [NO_CODE]: The skill consists entirely of Markdown instructions and does not include any executable scripts, binaries, or package dependencies.
Audit Metadata