pantheon-ai/retrospect-domain
Extract domain insights, patterns, and learnings from captured sessions for long-term knowledge retention.
63
79%
Does it follow best practices?
Impact
—
No eval scenarios have been run
Advisory
Suggest reviewing before use
Security
1 medium severity finding. This skill can be installed but you should review these findings before use.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.70). The required runtime workflow loads and reads “captured sessions” via `retrospect-load-sessions.sh` and then “Read session files — extract conversation turns,” which can include free-form text authored by other parties (e.g., collaborators/other users) that the operating user did not choose to introduce into the LLM context.
- Audited
- Security analysis