learn-anything-skill
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it is designed to ingest and process untrusted external data.
- Ingestion points: The skill ingests data from textbooks, official documentation, screenshots, and user-provided articles as defined in the 'Source Strategy' section of SKILL.md.
- Boundary markers: There are no specific instructions or delimiters defined to separate untrusted external content from the agent's core instructions.
- Capability inventory: The agent has the capability to write files to the local directory (e.g., creating Markdown files in the 'study/' folder).
- Sanitization: The skill does not include instructions for sanitizing or filtering external content before processing it or outputting it to files.
Audit Metadata