operating-calendar
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its document processing features.
- Ingestion points: The skill ingests untrusted data from user-supplied file paths during the CRITIQUE and UPDATE modes (e.g., '@path/to/calendar.md').
- Boundary markers: There are no explicit instructions for the agent to treat content within these files as data only or to ignore embedded instructions.
- Capability inventory: The skill has the capability to write files to the local filesystem ('operating-calendars/' directory) and format structured JSON output.
- Sanitization: The instructions do not specify any validation, filtering, or escaping of the content read from external documents before it is processed or used to generate new artifacts.
Audit Metadata