prompt-literacy-sequence-designer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses variables like
{{subject_area}},{{student_level}}, and{{ai_task_type}}to build its instructions. This creates a surface where user-provided input could potentially contain instructions intended to override the agent's behavior. - Ingestion points: The input schema fields in
SKILL.mdare interpolated directly into the model instructions. - Boundary markers: Absent. The inputs are not enclosed in delimiters or accompanied by instructions to ignore embedded commands.
- Capability inventory: None. The skill does not request access to any tools (e.g., shell, filesystem, or network), which significantly limits the risk of any successful injection.
- Sanitization: The skill does not perform validation or sanitization on the input strings before processing them.
- [NO_CODE]: The skill contains only instructional text and metadata. No scripts, binaries, or package manager files are included or referenced.
Audit Metadata