lecture-review
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests raw lecture transcripts and HTML slide files for analysis. If these inputs contain adversarial instructions, they could influence agent behavior as there are no boundary markers or sanitization steps. * Ingestion points: Raw transcript text and HTML slide deck content processed via the
--deckparameter. * Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the processed content. * Capability inventory: Subprocess execution of Python scripts and writing reports/profiles to the local file system. * Sanitization: No input filtering or content sanitization is described. - [COMMAND_EXECUTION]: The skill runs a local script
scripts/analyze_stats.pyusingpython3to extract statistics. The script is part of the skill package and uses standard libraries to perform regex-based text processing without network access.
Audit Metadata