youmind
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official
@youmind-ai/clipackage from the NPM registry to provide its core functionality. - [COMMAND_EXECUTION]: The skill utilizes Bash commands to execute search, info, and call operations through the
youmindCLI tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-generated content from the workspace, which is an ingestion point for untrusted data. 1. Ingestion points: Data retrieved via
youmind searchandyoumind call. 2. Boundary markers: None present. 3. Capability inventory: The skill can create, update, move, and trash content. 4. Sanitization: Instructs the agent to confirm user intent before performing actions that change the workspace or publish data.
Audit Metadata