edit-story
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's documentation describes using a shell command (
node -e) to manage document change logs. This command interacts with local scripts provided within the skill's bundle. - [DYNAMIC_EXECUTION]: A dynamic execution pattern is documented for appending entries to the change log, utilizing Node.js to execute a code string that requires local modules. This logic is used for structured data updates.
- [INDIRECT_PROMPT_INJECTION]: The skill processes and modifies user-controlled story documents. While this introduces a potential indirect prompt injection surface, the skill implements robust mitigations, including mandatory diff previews and user approval for all medium-to-high risk modifications.
- [SAFE]: No malicious behaviors were identified. The skill incorporates several safety-oriented features, such as strict file-type validation (rejecting non-story files) and post-edit verification of document integrity.
Audit Metadata