teachme
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads from local workspace files to inform its teaching logic, which creates a potential surface for instructions within those files to influence the agent's behavior during content generation.
- Ingestion points: The agent is instructed to read
MISSION.mdand existing learning records in thelearning-records/directory as part of Step 2. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' commands when processing the content of these files.
- Capability inventory: The agent has the ability to write new files to the filesystem, including HTML, JavaScript, and Markdown files.
- Sanitization: There are no instructions provided to sanitize or filter the data retrieved from the workspace files before it is interpolated into generating lessons.
- [DYNAMIC_EXECUTION]: The skill involves the runtime generation of interactive content that includes executable scripts.
- Evidence: Step 4 instructs the agent to "Generate a reusable, interactive diagnostic widget stored in the configured assets/ directory and embed it into the lesson HTML." This involves generating JavaScript code that handles validation and randomized logic.
Audit Metadata