teachable-course-creator
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands like
npm installandnpm run devin the local path/Users/shunsukehayashi/dev/ai-course-content-generator-v2. This is used to initialize and run the CCG integration components. - [EXTERNAL_DOWNLOADS]: Retrieves course structure data from MindMeister via
WebFetchand downloads project dependencies usingnpm installfrom the official registry. - [REMOTE_CODE_EXECUTION]: Runs local application code via
npm run devas part of the intended content generation workflow. - [PROMPT_INJECTION]: Ingests external curriculum data from MindMeister and local files to drive browser automation actions on the Teachable admin panel. This is an indirect injection surface where external data influences tool usage. [Ingestion points]: MindMeister map URLs (WebFetch) and local JSON files (Read). [Boundary markers]: None present. [Capability inventory]: Browser automation (navigation, clicking, typing) and Bash command execution. [Sanitization]: No validation or sanitization of the curriculum data is specified before it is used for automation.
Audit Metadata