lecture-notes
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content in the form of lecture transcripts provided via file paths or direct text input.
- Ingestion points: Video lecture transcripts provided as file paths (.txt, .md) or text pasted into the conversation (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or safety instructions to treat the transcript content strictly as data, potentially allowing malicious instructions embedded within a transcript to be interpreted as commands by the agent.
- Capability inventory: The skill possesses the capability to read local files and write new markdown files to the filesystem (SKILL.md).
- Sanitization: There is no evidence of content sanitization or validation before the transcript is processed or the notes are written to a file.
Audit Metadata