zettelkasten
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external content such as book highlights, chapters, and transcripts to generate notes, creating a vulnerability surface where instructions embedded in the source material could potentially influence the agent's behavior.
- Ingestion points: External material including highlights, chapters, and transcripts provided by the user as described in the 'What to ask for' section of SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings for the input material.
- Capability inventory: The agent can perform searches and save new notes if a notes connector (such as the vendor-provided Scratchpad connector) is configured.
- Sanitization: There are no explicit instructions for sanitizing or escaping the external content before it is processed by the agent.
Audit Metadata