short-fiction-scaffolder
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/scaffold_project.pyto generate the project structure. The script is part of the skill package and performs intended scaffolding operations. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided text (e.g., story title, genre) and interpolates it into Markdown templates. While this is the core functionality of a scaffolding tool, it represents an injection surface if the inputs are not properly sanitized for Markdown control characters.
- Ingestion points: User-supplied values for
--title,--pen-name,--genre, and--target-lengthare passed toscripts/scaffold_project.pyand rendered into project files. - Boundary markers: None implemented within the generated Markdown templates to delimit user-provided content.
- Capability inventory: The script performs filesystem write operations and handles file copying within the target directory.
- Sanitization: The script uses
html.escapefor the title when used in HTML tags, but other fields use raw string replacement in Markdown files.
Audit Metadata