tag-organize-cli
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
wpsnote-cliutility to interact with the local WPS Notes application. This allows the agent to read, search, and edit notes as part of its core functionality.\n- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. It reads untrusted content from notes to determine tag assignments, which could allow maliciously crafted note text to influence the agent's behavior.\n - Ingestion points: Note content is ingested through
wpsnote-cli readandwpsnote-cli read-blockscommands.\n - Boundary markers: No specific delimiters are used to encapsulate or identify untrusted data from the user.\n
- Capability inventory: The skill possesses write capabilities through
wpsnote-cli editandwpsnote-cli batch-edit.\n - Sanitization: No validation or sanitization of the note content is performed before processing.
Audit Metadata