teach

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to open generated HTML lesson files using system-level CLI commands to facilitate user interaction with the course material.
  • [DYNAMIC_EXECUTION]: The agent is tasked with generating and storing dynamic content, including HTML files and reusable web components such as scripts, stylesheets, and interactive "simulators" or "quiz widgets" within the ./lessons/ and ./assets/ directories.
  • [INDIRECT_PROMPT_INJECTION]: The skill framework is designed to ingest and process data from external, potentially untrusted sources to generate its educational content.
  • Ingestion points: Content is retrieved from external websites, articles, and books identified during research, as well as user-managed files like RESOURCES.md and MISSION.md.
  • Boundary markers: The instructions do not specify the use of delimiters or isolation protocols when incorporating external content into generated lessons.
  • Capability inventory: The skill has the capability to write files across multiple workspace directories and execute CLI commands to open those files.
  • Sanitization: There are no explicit requirements for sanitizing or escaping external data before it is included in generated files or used in command-line interactions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 07:48 AM
Security Audit — agent-trust-hub — teach