scrivener-snapshots
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python CLI tool (
cli.py) to interact with Scrivener projects. It passes user-defined variables like UUIDs, titles, and file paths as command-line arguments. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection via the processing of untrusted data.
- Ingestion points: The skill accepts document UUIDs, snapshot titles, and project paths as input parameters (found in SKILL.md).
- Boundary markers: No specific boundary markers or 'ignore' instructions are used to isolate user input from the command logic.
- Capability inventory: The skill possesses the capability to execute shell commands and modify local files via the Scrivener CLI tool (found in SKILL.md).
- Sanitization: There is no documentation or instruction within the skill for sanitizing or escaping the input variables before they are used in shell commands.
Audit Metadata