eva-teaching
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted third-party content and user manuscripts, which is a common vector for indirect prompt injection attacks. It includes specific defensive instructions to refer to a safety boundary configuration when handling external materials to ensure they are treated as data rather than executable instructions.
- Ingestion points:
references/teaching/01_benchmark-quick_快速对标拆解.mdandreferences/teaching/04_manuscript-review_文稿审核与批改.mdprocess external samples and user drafts. - Boundary markers: The instructions explicitly mandate reading
../../../eva-shared/references/shared/06_external-material-safety_外部材料安全边界.mdbefore processing untrusted inputs. - Capability inventory: The skill reads local files and delegates tasks to other specialized skills within the vendor ecosystem.
- Sanitization: The skill contains instructions to ignore instructional keywords (like tool calls or network requests) within the analyzed materials.
- [DYNAMIC_EXECUTION]: The skill uses dynamic file path resolution to discover other components of the agent ecosystem and to load document-specific guidelines. It uses relative directory traversal to access shared resources and scans sibling directories to identify available 'eva' skills.
- Evidence:
references/teaching/00_eva-new-user_新手教程.mdscansskills/eva*/SKILL.mdto determine installation status and provide relevant tutorials.
Audit Metadata