vault-notes
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to perform broad file system operations, including creating, modifying, moving, and deleting files and directories within a local Obsidian vault. This includes access to the .obsidian configuration folder.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8). 1. Ingestion points: The skill reads content from all PARA folders, including 00_Inbox which may contain unvetted content from web-clipping or external sources. 2. Boundary markers: No delimiters or specific 'ignore instructions' markers are defined for note content. 3. Capability inventory: The skill has permission to read, write, and delete files across the vault structure. 4. Sanitization: The skill lacks automated sanitization, relying on the agent to read context before modifying files.
Audit Metadata