student-feedback-writer
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process student work and assignment prompts, which are external data sources that could potentially contain hidden instructions.
- Ingestion points: Untrusted data enters the agent's context through 'Step 1: Gather inputs', which requires 'The student work itself' and 'The assignment prompt'.
- Boundary markers: The instructions do not provide the agent with specific delimiters or warnings to ignore instructions that might be embedded within the student's work.
- Capability inventory: The skill does not utilize any tools for file writing, network communication, or shell command execution, which significantly mitigates the risk of a successful injection.
- Sanitization: There is no evidence of sanitization, filtering, or escaping logic applied to the input data before it is processed for feedback generation.
Audit Metadata