lesson-quiz
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads from local README.md files to provide context for quiz questions and explanations. This ingestion of external data creates a potential surface for indirect prompt injection if the files contain hidden instructions.
- Ingestion points: The skill reads files from directory paths like
<lesson-directory>/README.mdas instructed in SKILL.md (Step 2 and Step 6). - Boundary markers: The skill does not implement boundary markers or instructions to the agent to disregard commands within the ingested text.
- Capability inventory: The skill is authorized to read local files and prompt the user. It lacks high-risk capabilities like network exfiltration or shell command execution.
- Sanitization: No sanitization is performed on the documentation content before it is processed by the agent.
Audit Metadata