reflect
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, data exfiltration attempts, or unauthorized external communications were detected.
- [COMMAND_EXECUTION]: The skill instructs the agent to use
datefor time calculations andfindfor locating local markdown files in thesessions/directory. These are routine operations for managing local state. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted data from local files.
- Ingestion points: Markdown files located in the
sessions/directory (SKILL.md). - Boundary markers: No delimiters or instructions are used to separate ingested file content from the agent's instructions.
- Capability inventory: The agent can execute
findanddatecommands, read local session files, and write reflections to thereflections/directory (SKILL.md). - Sanitization: There is no evidence of content sanitization or validation of the processed files.
Audit Metadata