primary-math-question-generator
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it is designed to ingest and analyze untrusted user-supplied content (math questions).
- Ingestion points: User input is received during the 'First Phase: Problem Reception and Analysis' described in
SKILL.md. - Boundary markers: The skill instructions do not specify any delimiters or safety prompts to prevent the agent from following instructions potentially embedded within the user's math problem input.
- Capability inventory: The skill's primary capabilities are text analysis and generation; it does not invoke external tools or perform network operations.
- Sanitization: There are no documented steps for sanitizing or filtering the input text for malicious commands or behavioral overrides.
- [NO_CODE]: The skill consists entirely of instructional markdown and reference files. It does not include scripts, executables, or package dependency files, which significantly reduces its technical attack surface.
Audit Metadata