ps-teach
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external bodies of work, such as code and technical descriptions, which constitutes a surface for indirect prompt injection attacks.
- Ingestion points: The skill instructions direct the agent to "Read the code yourself to get oriented" and to process the "body of work" identified in the conversation context.
- Boundary markers: The instructions lack explicit requirements for the agent to use delimiters or specific "ignore embedded instructions" warnings when handling content from the target files.
- Capability inventory: The skill possesses the ability to read project files, invoke sub-skills (
ps-how,ps-why,ps-unslop), and utilize an image-generation tool to visualize the findings. - Sanitization: There are no specified sanitization or filtering steps to prevent the agent from following instructions potentially embedded within the analyzed code or documentation.
Audit Metadata