tutorial-writer-review
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute shell commands to verify technical consistency and build stability. Specifically, it uses
grepto check for framework usage across chapters (Q10) anduv run mkdocs build --cleanto ensure the documentation website generates without errors (Q14). - [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves ingesting and analyzing untrusted Markdown files provided as tutorial content. This creates a surface where malicious instructions embedded in the tutorials could influence the agent's review logic or scoring.
- Ingestion points: The agent processes input
.mdfiles as the primary data source for its quality gates (SKILL.md). - Boundary markers: There are no explicit delimiters or instructions telling the agent to treat the tutorial content as data only or to ignore any embedded commands.
- Capability inventory: The skill possesses the ability to execute system commands like
grep,mkdocs, anduv(references/quality-gates.md). - Sanitization: No sanitization or safety filtering of the input Markdown files is specified before the agent performs its analysis.
Audit Metadata