skills/garethmanning/claude-education-skills/criterion-referenced-rubric-generator/Gen Agent Trust Hub
criterion-referenced-rubric-generator
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified during the analysis. The skill functions purely as a text-generation assistant for educational assessment design.
- [PROMPT_INJECTION]: The skill processes user-supplied data through template variables such as
{{learning_objective}}and{{task_description}}. While this constitutes a surface for indirect prompt injection (Category 8), the skill does not utilize any tools or capabilities (e.g., file system access, network operations, or shell execution) that would allow for data exfiltration or system compromise. The risk is limited to the generation of potentially misleading or off-topic text within the rubric output. - Ingestion points: Variables interpolated in the prompt section of
SKILL.md(e.g.,{{learning_objective}},{{task_description}},{{existing_criteria}}). - Boundary markers: The prompt uses bold headers to separate user input but lacks explicit instructions to the agent to disregard commands embedded within those inputs.
- Capability inventory: None. The skill does not request or use any external tools or executable commands.
- Sanitization: No input sanitization or validation logic is present.
Audit Metadata