quiz-generator
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from textbook chapters and glossaries to perform its primary functions, including quiz generation and project configuration updates.
- Ingestion points: The agent reads chapter markdown files and glossary documents (
docs/glossary.md) to extract educational concepts and terminology. - Boundary markers: There are no instructions defining delimiters or explicit warnings for the agent to ignore instructions that may be embedded within the processed chapter text.
- Capability inventory: The skill allows the agent to create new markdown and JSON files (e.g.,
quiz-bank.json,quiz-generation-report.md) and modify the existingmkdocs.ymlproject configuration file. - Sanitization: The instructions do not specify any validation, escaping, or sanitization steps for the data ingested before it is used in file generation or configuration updates.
Audit Metadata