yao-tutorial-skill
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's scripts (
scripts/export_tutorial.py,scripts/capture_visuals.py, andscripts/build_reference_doc.py) use the Pythonsubprocessmodule to execute external system tools. This includes callingpandocfor document conversion and Chromium-based browsers in headless mode to capture SVG screenshots and generate PDF files. These commands are constructed using local paths and are part of the core functionality for producing professional tutorial artifacts. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process information from untrusted external sources, including user-provided URLs and research results from X.com, GitHub, and academic platforms.
- Ingestion points: Data enters the context through user-defined
brief.jsonfiles and automated research logic described inreferences/research-sourcing.md. - Boundary markers: Present. The skill utilizes a structured workflow that separates internal research data (stored in the
research/directory) from the final public-facingtutorial.mdand export files. - Capability inventory: The skill possesses the ability to read and write to the local filesystem and execute shell commands for document exporting and browser-based rendering.
- Sanitization: The skill provides explicit instructions to the AI to paraphrase source material and normalize inputs. It also includes
scripts/validate_package.pyto check for internal data leaks (like source IDs) before delivery. - [DYNAMIC_EXECUTION]: The validation script
scripts/validate_package.pyuses the__import__function to dynamically check for optional dependencies such asPillow,weasyprint, andpython-docx. This mechanism is used solely for environment verification and dependency checking at runtime.
Audit Metadata