quiz-generator
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No security issues were detected. The skill performs expected file and shell operations within the local project scope.
- [COMMAND_EXECUTION]: The skill executes the
datecommand inSKILL.mdto record session timestamps for logging purposes. This is a standard and safe administrative action. - [SAFE]: The skill processes textbook chapters and glossary files which represents an indirect prompt injection surface. 1. Ingestion points:
docs/chapters/,docs/course-description.md, anddocs/glossary.md. 2. Boundary markers: Absent. 3. Capability inventory: Local filesystem writes (e.g., markdown and JSON files) anddatecommand execution. 4. Sanitization: Absent. This surface is inherent to the skill's functionality and poses no significant risk given its limited capabilities.
Audit Metadata