vault-tech-note
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill is a documentation tool designed to help users organize technical information within an Obsidian vault. Its primary actions involve reading local markdown files and performing web searches for technical verification, which are consistent with its stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the vault's README.md file and web search results to guide note creation. While this constitutes an attack surface, the risk is negligible due to the skill's specific output constraints.
- Ingestion points: Vault README.md (via execution steps) and web search results (via verification rules).
- Boundary markers: Absent; there are no explicit instructions to ignore embedded commands in the source documents.
- Capability inventory: File-writing access to the local vault (creating markdown notes).
- Sanitization: Absent; content from sources is interpolated directly into markdown output.- [NO_CODE]: The skill consists exclusively of markdown instructions and static reference documentation. It does not include executable scripts, binaries, or commands to install third-party dependencies.
Audit Metadata