competency-unpacker
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from curriculum standards or student profiles, creating a potential surface for indirect prompt injection.\n
- Ingestion points: The
competency_descriptorandstudent_profilesfields inSKILL.mdingest untrusted text.\n - Boundary markers: No delimiters or "ignore" instructions are present to isolate the inputs from the rest of the prompt.\n
- Capability inventory: The skill has no high-risk capabilities such as file system access, shell execution, or network requests.\n
- Sanitization: There is no evidence of input sanitization or filtering before interpolation into the prompt.
Audit Metadata