tutorial-generator

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill follows established best practices for content generation and does not request any tool permissions, network access, or file system modifications beyond standard persona references.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied topics and raw notes to generate its output, creating an ingestion surface for potential indirect prompt injection. However, because the skill has no access to dangerous tools or sensitive data, this risk is mitigated.
  • Ingestion points: User-provided topics and raw notes identified in the Execution Workflow section (SKILL.md).
  • Boundary markers: The instructions do not require the use of specific delimiters or 'ignore' instructions for the ingested content.
  • Capability inventory: The skill is restricted to Markdown text generation and does not perform shell commands, network requests, or file-write operations.
  • Sanitization: No sanitization or filtering logic is prescribed for the external inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:43 PM