learning-pedagogical-traditions
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMPROMPT_INJECTION
Full Analysis
- [Metadata Poisoning] (MEDIUM): There is a significant discrepancy between the documentation and the implementation.
SKILL.mddefines the skill as a tool for adapting instructional design to cultural pedagogical traditions (Confucian, Ubuntu, etc.). However, the metadata inskill.py(description="learning.pedagogical.traditions for globalization and compliance") and the default parameters (compliance_framework="GDPR") describe a compliance-focused tool. This inconsistency can lead to the agent misinterpreting the skill's capabilities or purpose. - [Indirect Prompt Injection] (LOW): The skill is designed to ingest and transform external content (
source_content). - Ingestion points: The
source_contentparameter inskill.pyand the--contentCLI flag. - Boundary markers: None identified. There are no delimiters to separate instructions from untrusted content.
- Capability inventory: Data transformation and JSON artifact generation (
f"{skill_dir}_output.json"). - Sanitization: No validation or sanitization is performed on the input content before processing.
- [Implementation Error] (INFO): The
executemethod inskill.pyreferences an undefined variableskill_dirin theprocessedresult string and theartifactslist. This will trigger aNameErrorat runtime, rendering the skill unusable in its current state.
Audit Metadata