start-learning

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill manages a local LEARNING.md file to track user progress through a curriculum. It uses external configuration from the author's official GitHub repository (fancyboi999/ai-engineering-from-scratch-zh), which is consistent with the skill's stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user input regarding their learning goals and time commitments. However, this data is only stored in a markdown file (LEARNING.md) for tracking purposes and does not flow into dangerous sinks like command execution or dynamic evaluation. The risk is assessed as safe/low.
  • [EXTERNAL_DOWNLOADS]: The skill optionally fetches ROADMAP.md from raw.githubusercontent.com/fancyboi999/ai-engineering-from-scratch-zh/main/ROADMAP.md if not available locally. This is a legitimate download from the vendor's repository to populate curriculum data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 05:59 AM
Security Audit — agent-trust-hub — start-learning