chapter-content-generator
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands (
bash) to log session start and end times to thelogs/directory for tracking generation progress. - [COMMAND_EXECUTION]: The skill provides a Python script to validate the integrity and directionality of concept dependency edges in the
docs/learning-graph/learning-graph.jsonfile. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes external data (e.g.,
docs/course-description.md,docs/glossary.md, and chapterindex.mdoutlines) without boundary markers or sanitization, which could allow malicious content in those files to influence the agent's output or tool use. - Ingestion points:
docs/course-description.md,docs/learning-graph/learning-graph.json,docs/glossary.md,CLAUDE.md, and chapterindex.mdfiles. - Boundary markers: None identified in the prompt interpolation steps.
- Capability inventory: Shell access (
bash), Python code execution, and theTasktool for spawning sub-agents. - Sanitization: No explicit filtering or validation of ingested text content is described.
Audit Metadata