topic-bookmarks-reorganizer
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill invokes a local Python script
scripts/reorganize_topic_bookmarks.pyto process bookmark files. This is consistent with the skill's primary purpose of file transformation. - [PROMPT_INJECTION] (LOW): The skill is susceptible to Indirect Prompt Injection because it ingests and processes untrusted user data from bookmark exports.
- Ingestion points: The
--inputfile path for the bookmarks HTML export. - Boundary markers: Absent; the instructions do not specify any delimiters or warnings to the agent to treat the bookmark content as untrusted data or to ignore embedded instructions.
- Capability inventory: Execution of a Python script and file system access for reading and writing.
- Sanitization: No sanitization or validation steps for the input file content are mentioned in the instruction file.
Audit Metadata