hook-storyboard-retention
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local scripts, such as audit-storyboard.mjs, to perform content validation and ensure the structural integrity of generated storyboards. These scripts are part of the skill internal tooling and run locally.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external signals from social media trends and subreddits, which presents an attack surface for indirect instructions. 1. Ingestion points: External trend data is harvested in SKILL.md during the Step 0 brainstorming phase. 2. Boundary markers: The skill does not define specific markers to delimit harvested data from core instructions. 3. Capability inventory: The skill uses local scripts for file system access (audit-storyboard.mjs) and mentions scripts for network research. 4. Sanitization: No specific sanitization methods for the harvested external data are described.
Audit Metadata