Camp Planning Knowledge

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill consists primarily of static reference data in Markdown format. No executable code, scripts, or active tool configurations were found across the 21 files analyzed.
  • [EXTERNAL_DOWNLOADS]: The documentation in references/school-calendars/README.md describes a workflow for fetching school calendars (PDFs) from official Ontario school board websites. These downloads target well-known educational and governmental domains for legitimate planning data.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents a pattern for ingesting and extracting data from external PDF sources (school calendars) into the agent's context.
  • Ingestion points: Untrusted data is retrieved from web searches and stored in the references/school-calendars/pdfs/ directory.
  • Boundary markers: The extracted markdown files (e.g., tdsb.md) do not currently include explicit markers to delimit untrusted content from instructions.
  • Capability inventory: No active tools are granted to this specific skill, though it is designed to inform the decision-making of other planning skills.
  • Sanitization: No specific sanitization or validation logic for the extracted PDF content is described in the provided documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 12:01 AM
Security Audit — agent-trust-hub — Camp Planning Knowledge