iblai-api-studio-outline
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes course outlines and component data from a
spec.jsonfile. This ingestion of external data is essential for its bulk-creation functionality. The skill mitigates risks by including a validation step that parses problem data usingxml.dom.minidomto ensure structural integrity before API submission. - [DYNAMIC_EXECUTION]: The skill utilizes inline Python scripts to validate JSON specifications and parse API responses. These scripts are used locally for data processing and do not involve the execution of untrusted remote code.
- [COMMAND_EXECUTION]: The skill uses
curlandbashto interact with the Studio API and manage session authentication. It retrieves sensitive tokens from a local.envfile, which is a standard and recommended practice for secret management in this context.
Audit Metadata