lecture-review

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests raw lecture transcripts and HTML slide files for analysis. If these inputs contain adversarial instructions, they could influence agent behavior as there are no boundary markers or sanitization steps. * Ingestion points: Raw transcript text and HTML slide deck content processed via the --deck parameter. * Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the processed content. * Capability inventory: Subprocess execution of Python scripts and writing reports/profiles to the local file system. * Sanitization: No input filtering or content sanitization is described.
  • [COMMAND_EXECUTION]: The skill runs a local script scripts/analyze_stats.py using python3 to extract statistics. The script is part of the skill package and uses standard libraries to perform regex-based text processing without network access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 01:52 PM
Security Audit — agent-trust-hub — lecture-review