uninterrupted-work-cycle-designer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because user-provided data is placed directly into the LLM's instruction context without isolation.
- Ingestion points: The skill accepts several string inputs (
available_time,learning_activities,student_level,class_size,current_routines,teacher_concerns,environment_setup) which are directly injected into the core prompt via template variables. - Boundary markers: The prompt template does not use delimiters (such as XML tags or triple quotes) or specific instructions to the model to ignore any instructions potentially hidden within the user-provided text.
- Capability inventory: The skill is restricted to text generation; it does not request tool permissions, perform file system operations, or initiate network requests.
- Sanitization: The skill does not perform any validation or filtering on input strings to prevent them from altering the agent's behavior.
Audit Metadata