course-guide
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves curriculum data and terminology definitions from a remote repository at
raw.githubusercontent.com/fancyboi999/ai-engineering-from-scratch-zh/when local files are unavailable. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from external URLs and local files to determine appropriate responses to user queries.
- Ingestion points: Reads data from
README.md,glossary/terms.md,program.json, and various learning path manifests (e.g.,model-context-protocol.json). - Boundary markers: No specific delimiters or instructions to ignore embedded commands are used when processing the ingested content.
- Capability inventory: The skill's functionality is limited to information retrieval and providing recommendations; it does not have the capability to execute system commands, write to the filesystem, or perform network exfiltration based on the ingested data.
- Sanitization: The instructions do not specify any validation or sanitization procedures for the data retrieved from external or local sources.
Audit Metadata