content-gen
Warn
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The verification suite (
verify_code.py,verify_blocks.py, andverify_challenges.py) compiles and executes code snippets extracted from markdown drafting files. This includes running Node.js scripts and compiled Rust binaries to validate that the examples taught in the courses are functional. - [COMMAND_EXECUTION]: Multiple tools use the
subprocessmodule to execute shell commands and system utilities.render_visuals.pycallsweasyprint,pdfinfo,pdftoppm,mutool, andcwebpto transform HTML specs into images.ci.pyexecutes the other internal validation tools. - [EXTERNAL_DOWNLOADS]: The environment setup (
verify/Dockerfile) fetches and executes toolchain installers from several remote sources, including Solana Anza (release.anza.xyz), Rustup (sh.rustup.rs), NodeSource (deb.nodesource.com), and Foundry (foundry.paradigm.xyz). These are well-known and reputable sources in the development ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process lesson drafts and user notes to generate content. Because the verification tools execute code extracted from these files, there is a risk that malicious instructions or code blocks embedded in a draft could be executed during the automated gate checks.
- [DYNAMIC_EXECUTION]:
verify_blocks.pyperforms network requests to thecrates.ioAPI to resolve dependency names and versions during the compilation check phase.
Audit Metadata