busa-writer
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data (blog posts, transcripts, outlines) to generate content drafts.
- Ingestion points: External source content is read via the
--sourceargument inscripts/generate_batch.mjsor through direct chat input. - Boundary markers: The instructions in
SKILL.mdandcontent/busa-writer-app/_node.jsoninclude explicit safety constraints, instructing the agent to never invent statistics, claims, or endorsements not present in the source material. - Capability inventory: The skill has the capability to write to the Busabase API and the local filesystem (via the export script).
- Sanitization: The companion web application uses
escapeHtmlfunctions inapp.jsandwriter-model.jsto mitigate cross-site scripting when rendering draft content. - [COMMAND_EXECUTION]: The skill requires the execution of local Node.js scripts for its primary workflow.
- The agent is instructed to run
node scripts/generate_batch.mjsto create drafts andnode scripts/export_decisions.mjsto package approved items. scripts/publish_airapp.mjsandscripts/setup.mjsare used for deployment and workspace initialization.- A human-in-the-loop requirement is enforced, as the
export_decisions.mjsscript only processes items marked asapprovedby a user in the review UI. - [EXTERNAL_DOWNLOADS]: The project relies on external Node.js dependencies.
- Dependencies include
busabase-sdk,hono, and@hono/node-server. - These resources are managed via standard package managers (pnpm) and originate from the skill author (Busabase) or well-known, trusted open-source maintainers.
Audit Metadata