eo-project-lesson
Pass
Audited by Gen Agent Trust Hub on May 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it ingests untrusted user content and writes it directly to persistent files.
- Ingestion points: User-provided "experience content" described in the Input and Execution sections of SKILL.md.
- Boundary markers: None identified; the instructions do not specify any delimiters or safety markers to isolate user content within the generated markdown files.
- Capability inventory: The skill performs file system operations including reading JSON configuration, creating directories, and writing/appending to markdown files (SKILL.md).
- Sanitization: There is no mention of sanitization, escaping, or validation of user-supplied text before it is interpolated into the markdown templates.
Audit Metadata