lesson-screen
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
lesson-screen.mjsexecutes shell commands to start a local server and launch web browsers (Chrome, Chromium, or Edge) for rendering and screenshots. This functionality is scoped to the primary purpose of providing a visual lesson interface. - [EXTERNAL_DOWNLOADS]: The skill fetches lesson data, practice questions, and assets from the author's public GitHub repository (
rohitg00/ai-engineering-from-scratch). This is the intended behavior for retrieving course curriculum. - [INDIRECT_PROMPT_INJECTION]: The tool processes local lesson files such as
docs/en.mdandquiz.jsonto generate interactive HTML screens. - Ingestion points: Files are read from the local repository or the
.lesson-screensession directory. - Boundary markers: Standard HTML templates are used; no specific 'ignore instruction' markers are present for the LLM itself.
- Capability inventory: The skill can spawn subprocesses (browsers) and write files to the session directory.
- Sanitization: Content is escaped using an internal
escapeHtmlfunction and markdown parsing logic before being embedded in templates. A restrictive Content Security Policy (CSP) is applied to the served pages to prevent unauthorized network requests.
Audit Metadata