learning-ai-integration
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): No security issues detected. The skill follows a standard structure for an AI agent extension.
- [Indirect Prompt Injection] (SAFE): The skill accepts external data via the
input_dataparameter. However, it does not process this data or interpolate it into further prompts or system commands, mitigating the risk of injection. - Ingestion points:
input_dataparameter inskill.py. - Boundary markers: None present.
- Capability inventory: No file system writes, network operations, or subprocess calls are performed.
- Sanitization: None, but no sensitive sinks are targeted.
- [Coding Quality] (SAFE): The variable
skill_dirused in theexecutemethod is not defined within the provided script, which will cause a NameError at runtime. This is a logic bug and does not pose a security risk.
Audit Metadata