mental-map
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process significant quantities of external, untrusted data to generate study guides and quizzes, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: The skill explicitly uses web search to retrieve 5-8 authoritative sources (textbooks, papers, documentation) and also accepts user-provided files or links in Phase 1.
- Boundary markers: Absent. The instructions do not specify any delimiters or safety prompts to prevent the agent from following instructions potentially embedded within the ingested learning materials.
- Capability inventory: The skill has the ability to perform web searches and write multiple markdown files (
materials.md,map.md,quiz-log.md) to the local file system. - Sanitization: Absent. There is no mention of filtering, escaping, or validating the content retrieved from external sources before it is processed into the final study map.
Audit Metadata