faq-generator
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from various markdown files and concept graphs to generate FAQ questions, answers, and quality reports. This is the primary function of the skill but presents a standard surface where text within those files could influence agent behavior.
- Ingestion points: The skill reads
docs/course-description.md,docs/learning-graph/03-concept-dependencies.csv,docs/glossary.md, and all files matchingdocs/**/*.mdas specified in Step 1 and Step 2 of the workflow. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings for the agent when processing the textbook content.
- Capability inventory: The skill writes to
docs/faq.md,logs/faq.md,docs/learning-graph/faq-chatbot-training.json,docs/learning-graph/faq-quality-report.md, anddocs/learning-graph/faq-coverage-gaps.md. It also modifiesmkdocs.yml. - Sanitization: Step 9 of the workflow includes validation for uniqueness, link integrity, Bloom's distribution, and technical accuracy, though it does not explicitly mention security-specific filtering for the ingested text.
- [COMMAND_EXECUTION]: The skill performs file system operations within the project directory to create FAQ documentation and quality reports. It also includes instructions in Step 10 to modify the
mkdocs.ymlconfiguration file to update the navigation structure, which is a standard operation for textbook project management.
Audit Metadata