chinese-novelist-skill
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several Python scripts (
check_chapter_wordcount.py,generate_epub.py,check_novel_health.py,check_rhythm.py, andtranslate_to_english.py) to handle utility tasks such as word count verification, rhythm analysis, and e-book generation. These scripts operate on local files within the novel project directory. - [EXTERNAL_DOWNLOADS]: The
translate_to_english.pyscript requires standard third-party libraries (openai,anthropic, andgoogle-generativeai) to communicate with official AI service endpoints. These are well-known technology providers. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) by reading and processing user-controlled Markdown files (drafts and outlines) to provide context for AI-driven writing and translation tasks.
- Ingestion points: The agent reads project files located in the
novels/directory, including00-大纲.mdand chapter files. - Boundary markers: The skill relies on standard Markdown headers (e.g.,
## 正文) to delimit content sections during processing. - Capability inventory: The skill executes Python scripts and performs file read/write operations within the project scope.
- Sanitization: Novel content is ingested directly for processing without specialized escaping or sanitization filters.
Audit Metadata