inspo-swipe-list
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes git commands to stage, commit, and push changes within the ~/obsidian/AzathHouse directory, interacting with the local filesystem and remote repositories.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the user's inspiration list and external URLs, which could contain malicious instructions. Ingestion points: Content from ~/obsidian/AzathHouse/Areas/Inspo Swipe List.md and data from external URLs referenced in that file. Boundary markers: No delimiters or instructions are provided to distinguish between the skill's logic and untrusted data. Capability inventory: File reading, shell command execution (git), and network fetching. Sanitization: No validation of retrieved content.
- [EXTERNAL_DOWNLOADS]: The instructions direct the agent to 'Open their links' for entries in the inspiration list, fetching content from external domains.
Audit Metadata