document-based-lesson-designer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no executable code, network operations, or sensitive file access. It functions purely as a text-generation template based on established educational research.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection as it interpolates untrusted user data into the prompt.
- Ingestion points: User-provided strings for
central_questionanddocument_setare inserted into the system instructions inSKILL.md. - Boundary markers: The prompt uses bold labels for these fields but does not include explicit instructions for the model to ignore potential commands embedded in the inputs.
- Capability inventory: The skill has no associated tools, subprocess calls, or network capabilities.
- Sanitization: There is no evidence of input validation or sanitization.
- Conclusion: Due to the total lack of exploitable capabilities, this injection surface poses no risk to the host system or agent integrity.
Audit Metadata