Skills
skills/jeremylongshore/claude-code-plugins-plus-skills/evernote-core-workflow-a/Gen Agent Trust Hub

evernote-core-workflow-a

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or significant security vulnerabilities were detected. The skill follows established patterns for secure API integration.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes the official evernote Node.js package and references documentation from Evernote's official developer portal, which are well-known and trusted sources.\n- [PROMPT_INJECTION]: The skill is designed to handle untrusted data safely. Evidence: (1) Ingestion points: The createNote and createHtmlNote methods in references/implementation-guide.md accept external content. (2) Boundary markers: Content is wrapped within structured ENML (<en-note>) tags. (3) Capability inventory: The skill performs authorized Evernote API operations. (4) Sanitization: The htmlToENML function in references/implementation-guide.md removes dangerous elements such as <script>, <form>, and <iframe> along with event handler attributes to mitigate injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 12:47 AM