reggio-documentation-protocol
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: A thorough analysis of the skill's instructions, metadata, and prompt logic confirms that it is a pedagogical tool without malicious intent. No evidence of data exfiltration, credential harvesting, or unauthorized command execution was found.\n- [PROMPT_INJECTION]: The skill uses direct interpolation for variables such as
{{learning_experience}}and{{documentation_purpose}}, which creates a surface for indirect prompt injection. However, this is assessed as safe because the skill is restricted to text generation and lacks access to sensitive capabilities or external tools.\n - Ingestion points: User-provided strings for the learning experience and purpose are injected into the prompt section of
SKILL.md.\n - Boundary markers: Absent. The prompt does not utilize delimiters or explicit instructions to ignore commands within the user input.\n
- Capability inventory: The skill has no defined tools and cannot perform file system operations, network requests, or execute shell commands.\n
- Sanitization: Absent. No validation or escaping is applied to the input variables.
Audit Metadata