teacher-toolkit
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the
pymupdfPython library for PDF parsing. It provides instructions to install this library viapip install pymupdf, which is the standard method for acquiring this well-known package from the Python Package Index (PyPI). - [COMMAND_EXECUTION]: The skill contains logic to execute
pip install pymupdf -qto automatically set up its environment if the required library is missing. This command execution is scoped to dependency management for its primary educational functions. - [DATA_EXPOSURE]: The skill reads and processes local files, specifically PDFs and images provided by the user. It uses a Python script with
fitz.open()to extract text for analysis. This data access is aligned with the skill's purpose of aiding teachers with their provided teaching materials. - [PROMPT_INJECTION]: The skill processes external, untrusted content from textbooks and student submissions, presenting an indirect prompt injection surface.
- Ingestion points: Text and PDF files processed in
SKILL.md(Step 3). - Boundary markers: The prompts lack explicit delimiters to separate extracted user content from system instructions.
- Capability inventory: Package installation via
pipand file read access via thefitzlibrary. - Sanitization: No specific sanitization or filtering of the extracted text is implemented before it is passed to the AI models.
Audit Metadata