write-story
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The workflow requires the agent to execute a local Python script at
../../scripts/check_style.pyto validate prose against style rules. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from external narrative planning files, including story bibles, character descriptions, and scene outlines.
- Ingestion points: Step 1 of the workflow reads multiple external story planning files into the context.
- Boundary markers: There are no explicit instructions to use delimiters or to ignore embedded instructions within these files.
- Capability inventory: The skill has permission to write files (
01_story/story.md) and execute scripts (check_style.py). - Sanitization: No sanitization or validation of the planning content is specified.
Audit Metadata