papercut-hook
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external research files which introduces a vulnerability to indirect prompt injection.
- Ingestion points: The skill reads research data and brief information from episodes/NN-slug/research/facts.md and SERIES.md.
- Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded within the research data.
- Capability inventory: The skill is capable of writing to episodes/NN-slug/papercut/STORYBOARD.md and narration/script.json.
- Sanitization: No sanitization or validation of the input data is performed before it is used to generate storyboard blocks and script narration.
Audit Metadata