start-learning
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages a local
LEARNING.mdfile to track user progress through a curriculum. It uses external configuration from the author's official GitHub repository (fancyboi999/ai-engineering-from-scratch-zh), which is consistent with the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user input regarding their learning goals and time commitments. However, this data is only stored in a markdown file (
LEARNING.md) for tracking purposes and does not flow into dangerous sinks like command execution or dynamic evaluation. The risk is assessed as safe/low. - [EXTERNAL_DOWNLOADS]: The skill optionally fetches
ROADMAP.mdfromraw.githubusercontent.com/fancyboi999/ai-engineering-from-scratch-zh/main/ROADMAP.mdif not available locally. This is a legitimate download from the vendor's repository to populate curriculum data.
Audit Metadata