daily-task-manager
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it is designed to ingest and process data from external files that may contain untrusted content.
- Ingestion points: Reads content from
workspace/tasks/current.mdandCHIEF_OF_STAFF_CONTEXT.md. - Boundary markers: The skill lacks explicit boundary markers (such as XML tags or dedicated delimiters) and instructions to the agent to disregard any commands embedded within the task descriptions.
- Capability inventory: The skill possesses file read and write capabilities specifically for the
workspace/tasks/current.mdpath. - Sanitization: There are no documented procedures for sanitizing, escaping, or validating the content retrieved from the task files before it enters the agent's execution context.
Audit Metadata