build-project
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3to execute a local scriptscripts/project_test.pyfor initializing project workspaces, running stage-specific graders, and generating completion reports. - [EXTERNAL_DOWNLOADS]: Fetches curriculum documents, code skeletons, and test configurations from the author's GitHub repository (
fancyboi999/ai-engineering-from-scratch-zh) when the local project repository has not been cloned. - [INDIRECT_PROMPT_INJECTION]: The skill ingests markdown and JSON files from the
projects/directory to guide its tutoring behavior and determine project stages. - Ingestion points: Loads data from
project.jsonandzh.mdfiles within the project subdirectories. - Boundary markers: The instructions do not define specific delimiters or warnings to ignore potential instructions embedded within the lesson content.
- Capability inventory: Can execute shell commands through the project's testing script and write progress logs to
PROJECTS-LEARNING.md. - Sanitization: No explicit validation or escaping is applied to the content of the curriculum files before the agent processes them.
Audit Metadata