think
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses dynamic context injection with the
!datecommand to include the current timestamp in the document. This execution occurs at load time and is used for record-keeping. - [PROMPT_INJECTION]: The skill includes an indirect prompt injection surface by interpolating user-provided
$ARGUMENTSinto the reasoning prompt. 1. Ingestion points: User arguments are directly inserted into the final section of SKILL.md. 2. Boundary markers: The skill lacks delimiters or explicit instructions to ignore embedded commands within the user input. 3. Capability inventory: The skill can initiate background_task calls to other agents and write to the file system using obsidian_append_content. 4. Sanitization: No sanitization is performed on the user-supplied content before processing. - [DATA_EXFILTRATION]: The skill references a template file at
~/.config/opencode/templates/thinking-session.md. Accessing files within the.configdirectory is a sensitive operation, although in this context, it appears to be a legitimate use of a shared template for formatting output.
Audit Metadata