skills/suzheng/k2f/k2f-lesson-plan/Gen Agent Trust Hub

k2f-lesson-plan

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the user or agent to execute the command npx skills add suzheng/k2f --skill k2f to install a prerequisite skill. This command installs a companion skill authored by the same developer ('suzheng') to handle document layout and formatting.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of teacher notes or topic prompts to generate lesson blueprints.
  • Ingestion points: Workflow Step 1 in SKILL.md identifies "teacher notes or topic prompts" as the primary input for generating the content_and_design.md blueprint.
  • Boundary markers: The instructions do not specify any delimiters or safety warnings to ensure the agent ignores instructions that may be hidden within the user-provided notes.
  • Capability inventory: The skill possesses the ability to generate markdown files and use the k2f tool to export documents into classroom-ready formats based on the ingested content.
  • Sanitization: There is no evidence of filtering, escaping, or sanitizing the input data before it is incorporated into the lesson plan instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 12:49 PM