teach
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to invoke specialized interactive quiz tools such as
AskUserQuestion,ask_user_question, orquiz. These calls are defined inreferences/quiz-ui.mdto conduct assessments during the teaching process. - [DATA_EXFILTRATION]: The skill manages student state by reading and writing to a local
.alvar/directory as described inreferences/learner-files.md. These operations are limited to the local filesystem and are used to persist learning history and preferences between sessions. - [PROMPT_INJECTION]: The instructions in
SKILL.mdrequire the agent to read user-defined profiles from.alvar/LEARNER.md. This allows user-provided content to influence the agent's instructional style and pace, which is an intended feature of the skill but creates a surface for potential indirect prompt influence. - Ingestion points:
.alvar/LEARNER.md,.alvar/maps/*.md,.alvar/sessions/*.md(mentioned inreferences/learner-files.md). - Boundary markers: The skill uses markdown headers but lacks specific instructions to ignore embedded commands within the learner files.
- Capability inventory: File system read/write access and execution of interactive tool calls.
- Sanitization: None; the agent consumes the content to adjust its persona and planning.
- [EXTERNAL_DOWNLOADS]: The skill's metadata and
references/philosophy.mdinclude a link to a YouTube video that serves as the methodological source. This reference is purely informational and targets a well-known, trusted service.
Audit Metadata