learn
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the current conversation to generate outputs and modify files, creating a potential injection surface.
- Ingestion points: The skill description indicates it surfaces learnings from the 'current conversation' (SKILL.md).
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in this shim to protect against malicious user input in the conversation.
- Capability inventory: The skill is granted access to powerful tools including
Write,Edit, andBash(SKILL.md frontmatter). - Sanitization: No evidence of sanitization or validation of conversation content is provided in this file.
Audit Metadata