novel-characters
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes its own Node.js script to perform text chunking, data merging, and report rendering. These shell operations are strictly limited to local file processing and do not involve untrusted commands. Evidence: CLI commands in
SKILL.mdsuch asnode scripts/novel-characters.mjs chunkandrender. - [SAFE]: The skill implements strong output validation to prevent data corruption or model hallucinations. Evidence: The
validateCastfunction inscripts/novel-characters.mjsperforms deterministic checks on structure, enum values, and ensures that evidence quotes are verbatim copies of the source text. - [SAFE]: The rendering logic includes built-in XSS protection for generated HTML reports. Evidence: The
escandmarkedfunctions inscripts/novel-characters.mjsescape all character data and stories summaries before embedding them into the report template. - [SAFE]: The skill is designed to be self-contained and avoids all external network requests or third-party package dependencies. Evidence: The
scripts/novel-characters.mjsfile uses only Node.js standard library modules (node:fs,node:path,node:url) and explicitly targets local platform binaries likecodex.
Audit Metadata