anki-card-generator

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill instructions and reference examples are focused entirely on text formatting and pedagogical best practices for spaced-repetition flashcards. No unauthorized commands, network requests, or credential access were detected.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external knowledge sources, including wiki links and study materials provided by the user at runtime. This creates a surface for indirect prompt injection if the source content contains malicious instructions. However, the skill's enforcement of highly structured, atomic output (markdown tables with specific word limits) acts as a natural mitigation against the execution of complex injected payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:06 PM