tutorial
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform quality assurance checks and verify documentation integrity. Specific commands includepnpm lint:md,pnpm build,pnpm start, andvale. These are standard tools in a documentation-as-code workflow. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests and processes untrusted data.
- Ingestion points: The skill processes user-supplied "topics" via the
argument-hintand reads "related docs" (referenced inSKILL.mdstep 2) to research tutorial content. - Boundary markers: There are no explicit instructions or delimiters defined to isolate external documentation content or user input from the agent's core instructions.
- Capability inventory: The skill has
WriteandEditpermissions to create and modify files, andBashpermissions to execute project build and linting scripts as documented inprocess.md. - Sanitization: The skill lacks instructions for sanitizing or validating external content before it is interpolated into the generated tutorial files or processed by local build tools.
Audit Metadata