vault
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the file system. It executes
git rev-parse,find,grep, andcatbased on paths stored in a registry file. While these are used for the stated purpose of note searching, they involve direct execution of shell utilities on local data. - [EXTERNAL_DOWNLOADS]: The skill facilitates data ingestion from external local directories (Obsidian, Logseq, markdown folders). This represents an ingestion point for untrusted data that could contain malicious instructions designed to influence the agent's behavior (Indirect Prompt Injection).
- [COMMAND_EXECUTION]: The skill uses
$ARGUMENTSin a context that suggests shell interpolation, which could lead to command injection if argument sanitization is not handled by the platform's core execution engine. - [COMMAND_EXECUTION]: Capability Inventory: The skill performs subprocess calls using
find,grep,cat, anddateacross various modes (List, Connect, Search, Context reading). This provides a significant capability tier for an agent interacting with potentially untrusted note files.
Audit Metadata