skills/reigpol/recipes/anki/Gen Agent Trust Hub

anki

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill instructs the agent to dynamically generate and execute Python scripts to build flashcard decks and run automated integration tests using unittest. This behavior is the primary mechanism for the skill's stated purpose of packaging flashcards.
  • [PROMPT_INJECTION]: The skill ingests untrusted data from external sources (e.g., CSV or text files) and interpolates it directly into HTML templates for card fields (e.g., {{Word}}, {{Meaning}}). While this is standard for flashcard generation, it represents an indirect injection surface if the input data contains malicious HTML or script tags.
  • Ingestion points: Source material parsing in Step 1.1.
  • Boundary markers: None provided in the instructions.
  • Capability inventory: Python script execution, file writing, and SQLite database manipulation.
  • Sanitization: No explicit sanitization or escaping instructions are provided for the input data before it is rendered in the card templates.
  • [EXTERNAL_DOWNLOADS]: The skill requires the genanki Python library to function. This is a well-known community library for generating Anki decks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 09:14 PM
Security Audit — agent-trust-hub — anki