zhuoyu-workshop
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of instructional markdown files providing templates and workflows for student project management. No executable code, network operations, or malicious patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided artifacts such as repository files, report drafts, and logs as specified in SKILL.md. To mitigate risks from untrusted content, the skill includes comprehensive 'Red Lines' and 'Operating Rules' that prohibit fabrication and require grounding in evidence. The workflow also mandates an 'acceptance checklist' for manual user verification of all generated code changes and report content.
- Ingestion points: Repository files, report drafts, and logs as documented in SKILL.md.
- Boundary markers: 'Operating Rules' and 'Red Lines' sections provide explicit constraints against fabrication.
- Capability inventory: Capabilities include generating code suggestions and verification commands in references/ai-coding-workflow.md.
- Sanitization: Relies on manual user verification through the 'acceptance checklist' generated in the final output.
Audit Metadata