rapid-logging
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user data, creating a surface for indirect prompt injection.
- Ingestion points: Processes "raw material" such as brain dumps, scribbles, and messy lists provided by the user (as described in
SKILL.md). - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the user-provided text.
- Capability inventory: The skill can interact with connected notes apps (e.g., Scratchpad connector) to create new notes or append to existing ones.
- Sanitization: There is no evidence of input validation or escaping for the external content before it is processed or saved to the notes app.
Audit Metadata