lecture-alchemist
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection] (LOW): The skill is designed to ingest and process untrusted data (lecture transcripts) which could contain adversarial instructions aimed at influencing the agent's behavior. * Ingestion points:
SKILL.mddefines transcripts from Zoom, YouTube, or class recordings as the primary input. * Boundary markers: Absent. There are no instructions to the agent to treat transcript content as data only or to ignore embedded commands. * Capability inventory: The skill is limited to text generation and markdown formatting. It possesses no capabilities for code execution, file system modification, or network access. * Sanitization: No input validation or sanitization logic is present to filter malicious strings within the transcripts.
Audit Metadata