ship-learn-next
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its core functionality of processing untrusted external data.
- Ingestion points: The skill processes user-supplied text files, such as YouTube transcripts, articles, and notes, using the
Readtool as specified inSKILL.md(Step 1). - Boundary markers: The instructions lack explicit delimitation or warnings to the model to ignore potential instructions embedded within the learning material being analyzed.
- Capability inventory: The skill is authorized to use the
ReadandWritetools, allowing it to access local files and create new Markdown documents. - Sanitization: There is no mention of sanitizing, escaping, or validating the external content before it is interpolated into the agent's context for analysis and plan generation.
Audit Metadata