iblai-api-studio-problem
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands (
curl,node,python3) to interact with the Open edX Studio API and perform local validation tasks. This is consistent with its stated purpose of managing course content. - [DYNAMIC_EXECUTION]: It employs Python one-liners to validate OLX (XML) syntax and parse JSON responses from the server. This ensures data integrity before API requests are made.
- [DATA_EXPOSURE]: The skill manages authentication by reading session cookies and CSRF tokens from a local
.envfile (studio.env). This is a standard and secure way to handle credentials in development environments, avoiding hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided content to generate XML, it includes a validation step using
xml.dom.minidomto ensure the generated code is well-formed XML before transmission, mitigating some risks of malformed payload injection.
Audit Metadata