session-folder-organizer
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest session plans and summaries from an external parser to automate the creation of course directory structures. This represents an attack surface where maliciously crafted session data could attempt to influence the agent's behavior during the organization process.
- Ingestion points: Session rekapitulasi (summaries) and plans obtained from the external parser as described in the dialog flow.
- Boundary markers: Absent; there are no instructions to wrap ingested data in delimiters or to apply "ignore embedded instructions" warnings.
- Capability inventory: File and directory creation (via implied system tools) and interactive user communication.
- Sanitization: Absent; the skill provides no instructions to validate or sanitize session names or plan content before using them in the file system or summaries.
- [NO_CODE]: The skill does not contain any executable scripts, binaries, or source code files. It consists entirely of markdown-based instructions and directory structure templates.
Audit Metadata