tag-organize
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements proactive safety measures. It explicitly mandates a full content read before modification to prevent accidental data loss and strictly forbids the deletion of notes.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes user-generated note content.
- Ingestion points: Note content is ingested via
read_blocksandread_notetools as described in theSKILL.mdworkflow. - Boundary markers: No explicit delimiters are used when the agent processes the note content.
- Capability inventory: The agent has the capability to modify note contents using the
edit_blocktool. - Sanitization: The skill provides structural instructions to only modify tag elements and preserve the remaining text verbatim, which serves as a functional constraint.
Audit Metadata