manuscript-finisher
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/run_lint.pyscript executes thelanguagetoolandvalecommand-line tools usingsubprocess.run(). This is the primary mechanism for the skill's "Layer 0" proofreading. The commands are constructed using argument lists rather than shell strings, and they target manuscript files provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted manuscript content provided by the user. While the primary analysis is performed by local tools, the agent is subsequently tasked with reviewing the findings ("Layer 2").
- Ingestion points: Markdown files (
.md) passed toscripts/run_lint.pyandscripts/normalize_typography.py. - Boundary markers: The instructions explicitly separate findings into "AUTO" (mechanical) and "REVIEW" (judgment), directing the agent to only auto-apply mechanical fixes.
- Capability inventory: The skill has the ability to read and write files within the project directory and execute specific local CLI tools via subprocess.
- Sanitization:
scripts/run_lint.pyincludes astrip_mdfunction that removes markdown formatting and structural elements before passing text to the LanguageTool engine.
Audit Metadata