discipline-specific-critical-thinking-task-designer

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill incorporates user-provided curriculum information (such as topics and knowledge baselines) via direct interpolation. While this creates a surface for indirect prompt injection, it is assessed as safe because the skill is restricted to text generation and lacks access to tools, network requests, or file-writing capabilities that could be exploited.
  • Ingestion points: curriculum_topic, learner_stage, discipline_or_subject, knowledge_baseline, existing_learning_targets, and thinking_focus in SKILL.md.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used around interpolated variables.
  • Capability inventory: The skill produces text output only; it has no permissions for network access, file system modifications, or external tool invocation.
  • Sanitization: No input validation or escaping is applied to user-supplied text.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 03:22 PM
Security Audit — agent-trust-hub — discipline-specific-critical-thinking-task-designer