narrative-scrollytelling
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/validate_map.pyto perform structural validation on JSON maps. This is a benign use of local execution for a defined development task. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided JSON maps, which constitutes an ingestion surface. 1. Ingestion points: Data enters via the JSON map file passed to the validation script. 2. Boundary markers: None explicitly defined in the instructions. 3. Capability inventory: The skill leverages
python3for script execution but lacks network or sensitive data access. 4. Sanitization: The validation script applies strict schema and type checks to the input data.
Audit Metadata