learn
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform workspace management tasks, such as creating thearchitecture-studio-101directory and copying sandbox files. These operations are restricted to the learner's local practice folder. - [EXTERNAL_DOWNLOADS]: The skill instructions specify retrieving original sandbox resources and templates from the author's repository at
github.com/AlpacaLabsLLCduring the setup phase. These downloads are limited to the specific project files needed for the course. - [INDIRECT_PROMPT_INJECTION]: The course exercises involve processing unstructured and "deliberately messy" data, such as voice memo transcripts and unverified CSV files. The skill addresses this potential surface by teaching defensive habits, including the "plan first, build second" approach and requiring the agent to trace claims back to specific source lines.
- [DYNAMIC_EXECUTION]: In Module 5, the learner is guided to manually create a new skill file (
SKILL.md) in a subfolder of the practice directory. This is used as a pedagogical exercise to demonstrate how the AI platform triggers and follows procedures, rather than for malicious persistent execution.
Audit Metadata