secondbrain-entity
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates a TypeScript file (docs/.vitepress/data/.data.ts) based on a provided template. This file is executed within the VitePress environment to load and parse YAML data using the fs and js-yaml modules.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a data ingestion surface where external record files are processed and rendered into documentation. 1. Ingestion points: Records are read from .claude/data//records.yaml. 2. Boundary markers: The generated templates do not include explicit delimiters or instructions to ignore embedded commands. 3. Capability inventory: The generated code utilizes fs.readFileSync and yaml.load. 4. Sanitization: Input is parsed as structured YAML before being passed to Vue components for rendering.
Audit Metadata