skills/soia-team/soia-open-pkm-vault-skills/soia-pkm-transform-article-notebooklm/Gen Agent Trust Hub
soia-pkm-transform-article-notebooklm
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Multiple Python scripts (
local_artifact_smoke.py,notebooklm_artifact_matrix.py,notebooklm_health.py) utilizesubprocess.runto execute external binaries, includingnode,notebooklmCLI, and system utilities likepgrepfor environment health checks. These are used with structured argument lists rather than raw shell strings. - [COMMAND_EXECUTION]: The script
local_artifact_smoke.pydynamically constructs and executes a Node.js script using thenode -eflag to automate PDF and image generation via the Playwright library. - [EXTERNAL_DOWNLOADS]: The skill requires external dependencies including the
notebooklmCLI tool and theplaywrightNode.js package to generate and render artifacts. - [PROMPT_INJECTION]: The skill ingests article content from external files or URLs, creating an indirect prompt injection surface when this content is interpolated into LLM prompts for generating quizzes and summaries.
- Ingestion points: Article content is read from local Markdown files or fetched from URLs as specified in
SKILL.mdandlocal_artifact_smoke.py. - Boundary markers: No explicit safety delimiters are used when interpolating article excerpts into the generated reports or quiz prompts.
- Capability inventory: The skill possesses local file system write access, execution of shell commands via
subprocess, and network interaction through thenotebooklmCLI. - Sanitization: The skill uses
html.escapeto sanitize article content before rendering HTML artifacts andjson.dumpsto safely inject paths into dynamically generated JavaScript snippets.
Audit Metadata