ship-learn-next
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external content (transcripts, articles, notes) provided by the user via the Read tool, which presents an indirect prompt injection surface.
- Ingestion points: The skill reads file paths provided by users in Step 1: Read the Content as described in SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard instructions that may be contained within the source material.
- Capability inventory: The skill uses the Read tool to access files and the Write tool to save generated plans to the local filesystem.
- Sanitization: The instructions do not specify any validation, filtering, or escaping of the external content before processing.
Audit Metadata