k12-lesson-plan-creation

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the python-docx library from the official Python Package Index (PyPI). This is a well-known library used for document generation, and the installation is versioned to 1.1.2 in scripts/render_all.sh.
  • [COMMAND_EXECUTION]: The skill executes a bundled shell script (scripts/render_all.sh) and several Python scripts to transform structured lesson data into Word and HTML documents. This is the primary function of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes structured data (JSON) derived from user input to generate documents.
    • Ingestion points: The render_documents.py script reads a lesson.json file generated by the AI agent based on user (teacher) requirements.
    • Boundary markers: The skill uses a rigid JSON schema defined in references/output.md to separate different content blocks, such as shared resources and document sections.
    • Capability inventory: The skill performs file system operations (read, write, directory creation) and package installation within its execution environment.
    • Sanitization: The render_documents.py script sanitizes document identifiers using regular expressions (re.sub(r"[^A-Za-z0-9_\-]", "_", Path(doc_id_raw).name)) to prevent path traversal when creating output files. Additionally, the HTML renderer in render_lesson_html.py uses HTML escaping for all text content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 12:34 AM