fable-advisor
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/ask_fable.mjsusesspawnSyncto execute theclaudecommand-line utility.- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided text from standard input and passes it to a model execution process that has access to system tools. - Ingestion points: User input is read via standard input and inherited by the spawned
claudeprocess. - Boundary markers: The skill does not apply explicit delimiters or instructions to ignore embedded commands within the user input.
- Capability inventory: The model is invoked with tools such as
Read,Grep, andGlobenabled through the--toolsflag. - Sanitization: The skill performs no sanitization or validation of the input request before processing.- [DATA_EXPOSURE]: The script
scripts/ask_fable.mjsreads a system prompt from a file located at../../../claude-agents/fable-advisor.md, which is a relative path that accesses files outside the skill's root directory.
Audit Metadata