note
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or safety bypass attempts were found. The skill operates as described within the local environment.\n- [DATA_EXPOSURE_&_EXFILTRATION]: The skill manages files exclusively within the
literature/reading_notes/project path. It does not access sensitive system files, hardcoded credentials, or external network domains.\n- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it processes and stores untrusted user input into persistent files.\n - Ingestion points: Data from the user or previous assistant messages is captured to form reading notes in
SKILL.md.\n - Boundary markers: The skill uses a highly structured Markdown template with specific sections like
## Key Argumentsand## Detailed Notesto delineate data.\n - Capability inventory: Access is limited to standard
Read,Write,Edit, andGlobtools for local file management.\n - Sanitization: No explicit sanitization of input strings is performed before they are written to the notes files.
Audit Metadata