screenplay-drafter
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, potentially untrusted data to influence its output and project state.
- Ingestion points: The skill uses
renku screenplay import-fdx --fileto ingest Final Draft files and usesrenku asset listfollowed by various "harness readers" to ingest supporting materials such as PDFs, documents, and images. - Boundary markers: The instructions include guidelines to separate sourced facts from inventions and warn the agent not to mutate screenplays based on supporting material unless explicitly requested. However, there are no hard technical delimiters (like XML tags or multi-layer escaping) defined for the interpolated content.
- Capability inventory: The skill possesses broad capabilities including executing
renkuCLI commands for screenplay creation/revision, writing files to thetmp/directory, and modifying project metadata (loglines, synopses, premises) viarenku info set. - Sanitization: No specific technical sanitization or filtering of the ingested content is described; the skill relies on the agent's semantic judgment and user confirmation for ambiguous identity resolution.
- [COMMAND_EXECUTION]: The skill instructions heavily utilize the
renkuCLI for project management and screenplay operations. While these commands (renku create,renku screenplay apply,renku info set) are necessary for the skill's primary function, they represent an execution surface that could be leveraged if the agent's logic is influenced by malicious instructions embedded in the screenplays or supporting documents it is tasked to read.
Audit Metadata