tw-stu-exam-prep
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface.
- Ingestion points: The skill ingests data from local reference files (e.g.,
references/exam_systems.md) and diagnostic information provided by the user inSKILL.md(Step 2). - Boundary markers: There are no explicit delimiters or 'ignore embedded instruction' markers used when interpolating student data or reference content into the agent context.
- Capability inventory: The skill is authorized to use
Bash,Write,GoogleCalendar, andNotiontools, which provides an execution path for instructions that might be embedded in untrusted inputs. - Sanitization: The skill lacks explicit validation or sanitization steps for the input data before it is used to generate study plans or calendar entries.
Audit Metadata