learning
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill architecture is designed for organizational learning and knowledge routing, utilizing standard markdown templates and simple Python scripts for data extraction. No malicious intent or obfuscation was found in the provided files.
- [COMMAND_EXECUTION]: The
SKILL.mdfile contains instructions to execute a local script,scripts/install-external-skills.py, for managing external dependencies. While this script is not included in the analyzed file bundle, the pattern is consistent with local utility execution for skill lifecycle management. - [PROMPT_INJECTION]: The skill processes external markdown files via the
extract_lessons.pyscript. This represents an indirect prompt injection surface; however, the script only parses YAML blocks into JSON without executing the content, which follows safe data handling practices.
Audit Metadata