scaffold-exercises
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill parses user-supplied plan text to determine directory and file names for scaffolding.
- Ingestion points: Natural language plans containing section and exercise names provided by the user in the prompt flow.
- Boundary markers: No specific delimiters are used to wrap the input plan to prevent instructions embedded within the plan from being misinterpreted.
- Capability inventory: Filesystem modifications using
mkdir -pandgit mv, as well as execution ofpnpm ai-hero-clifor linting. - Sanitization: The instructions do not specify a requirement for the agent to sanitize or escape characters in the plan text before using them in shell commands.
- [COMMAND_EXECUTION]: The skill executes local shell commands to automate the course scaffolding workflow.
- Evidence: The skill workflow explicitly instructs the agent to run
mkdir -p,git mv, andpnpm ai-hero-cli internal lintto set up and validate the directory structure.
Audit Metadata