teacher-toolkit

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the pymupdf Python library for PDF parsing. It provides instructions to install this library via pip install pymupdf, which is the standard method for acquiring this well-known package from the Python Package Index (PyPI).
  • [COMMAND_EXECUTION]: The skill contains logic to execute pip install pymupdf -q to automatically set up its environment if the required library is missing. This command execution is scoped to dependency management for its primary educational functions.
  • [DATA_EXPOSURE]: The skill reads and processes local files, specifically PDFs and images provided by the user. It uses a Python script with fitz.open() to extract text for analysis. This data access is aligned with the skill's purpose of aiding teachers with their provided teaching materials.
  • [PROMPT_INJECTION]: The skill processes external, untrusted content from textbooks and student submissions, presenting an indirect prompt injection surface.
  • Ingestion points: Text and PDF files processed in SKILL.md (Step 3).
  • Boundary markers: The prompts lack explicit delimiters to separate extracted user content from system instructions.
  • Capability inventory: Package installation via pip and file read access via the fitz library.
  • Sanitization: No specific sanitization or filtering of the extracted text is implemented before it is passed to the AI models.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 06:31 AM