k12-lesson-plan-creation
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
python-docxlibrary from the official Python Package Index (PyPI). This is a well-known library used for document generation, and the installation is versioned to1.1.2inscripts/render_all.sh. - [COMMAND_EXECUTION]: The skill executes a bundled shell script (
scripts/render_all.sh) and several Python scripts to transform structured lesson data into Word and HTML documents. This is the primary function of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured data (JSON) derived from user input to generate documents.
- Ingestion points: The
render_documents.pyscript reads alesson.jsonfile generated by the AI agent based on user (teacher) requirements. - Boundary markers: The skill uses a rigid JSON schema defined in
references/output.mdto separate different content blocks, such as shared resources and document sections. - Capability inventory: The skill performs file system operations (read, write, directory creation) and package installation within its execution environment.
- Sanitization: The
render_documents.pyscript sanitizes document identifiers using regular expressions (re.sub(r"[^A-Za-z0-9_\-]", "_", Path(doc_id_raw).name)) to prevent path traversal when creating output files. Additionally, the HTML renderer inrender_lesson_html.pyuses HTML escaping for all text content.
- Ingestion points: The
Audit Metadata