founder-daily-brief
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill uses a straightforward Python script to format data provided by the user or gathered through standard agent research capabilities without using dangerous functions like eval(), exec(), or subprocess.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface typical of summarization tools, which allows for the aggregation of external data into a local report.
- Ingestion points: Industry news and competitor updates gathered from web research, as well as user-provided schedules, tasks, and business metrics (
SKILL.md). - Boundary markers: Absent; the instructions do not implement specific delimiters to distinguish between instructional content and ingested data in the final report.
- Capability inventory: The script
scripts/daily_brief.pyis capable of writing the aggregated content to the local filesystem. - Sanitization: Absent; input strings are interpolated directly into the markdown output file without escaping or filtering.
Audit Metadata