skills/sebas-aikon-intelligence/antigravity-awesome-skills/obsidian-clipper-template-creator/Gen Agent Trust Hub
obsidian-clipper-template-creator
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection attacks because it fetches and processes data from arbitrary external URLs.
- Ingestion points: The skill uses the
WebFetchtool or browser DOM snapshots to retrieve content from user-provided URLs for analysis, as described inSKILL.mdandreferences/analysis-workflow.md. - Boundary markers: There are no instructions for the agent to use delimiters or ignore potential commands embedded within the retrieved HTML content.
- Capability inventory: The skill has network access via the
WebFetchtool and reads local files from theTemplates/Bases/directory (referenced inreferences/bases-workflow.md). - Sanitization: The workflow does not include steps to sanitize or filter the fetched HTML data before the agent analyzes it for selectors and variables.
Audit Metadata