pro-editing
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on existing course content and potentially external materials, creating a surface where ingested data could influence agent behavior.
- Ingestion points: Content is fetched from course storage via
read_stageandlist_scenes. The instructions also note that the skill may use "attached materials or web access" to ground edits. - Boundary markers: The instructions focus on precise JSON Pointer addressing (e.g.,
/content/canvas/elements/N/content) to isolate changes, providing structural separation, though explicit prompt boundaries for content-level instructions are not specified. - Capability inventory: The skill possesses significant capabilities including database modification (
patch_stage), deck restructuring (edit_deck), page regeneration (generate_scene), and audio synthesis (generate_tts). - Sanitization: Instructions require the agent to perform 'surgical' edits, match existing styles, and conduct verification passes using
render_scene_previewandlist_scenesto ensure integrity.
Audit Metadata