storytelling-transformer
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security threats or malicious patterns were detected. The skill performs a simple text transformation and does not request access to the file system, network, or external APIs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data via a template variable. Evidence: 1. Ingestion points: User-supplied facts are interpolated into the prompt template in SKILL.md. 2. Boundary markers: The template uses tags to delimit external content. 3. Capability inventory: The skill possesses no capabilities for code execution, file modification, or network access. 4. Sanitization: No input sanitization is performed, though the low capability of the skill renders this surface safe.
Audit Metadata