session-notes
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to manage project configuration and resolve repository paths. These commands (e.g.,
git rev-parse,mkdir, andln) are scoped to the local filesystem and used for legitimate setup purposes as described inreferences/mapping.md. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface when processing user-provided transcription data. \n
- Ingestion points:
references/transcription.md(user-pasted meeting, course, or lecture content). \n - Boundary markers: Absent; the instructions do not implement specific delimiters or instructions to ignore embedded commands in the transcribed text. \n
- Capability inventory: The agent has access to
MCPVaulttools (write_note,patch_note,search_notes) and local shell execution for configuration. \n - Sanitization: None specified; transcription content is processed directly to extract metadata, tags, and observations.
Audit Metadata