localize
Warn
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: MEDIUMDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!commandsyntax to execute a shell script automatically when the skill is loaded. The command!bash "${CLAUDE_SKILL_DIR}/../../hooks/yaml-helper.sh" resolve_config --keys automationleverages environment variables and relative paths to execute code at load time. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data including source code, Game Design Documents, and narrative lore. Ingestion points: Reads files for string extraction and translator briefing generation. Boundary markers: Lacks explicit delimiters for content read from files. Capability inventory: Access to
Write,Edit,Bash, andAgenttools, allowing for potential modification of files or command execution based on interpreted untrusted content. Sanitization: No evidence of input validation or escaping for external content is provided in the instructions.
Audit Metadata