dialogue-systems
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as an instructional guide for narrative design and dialogue system implementation. All code snippets provided are for user implementation and do not execute during the skill's operation.
- [DYNAMIC_EXECUTION]: Included in
references/runner.mdis a reference implementation for a sandboxed expression evaluator. This example utilizes theastmodule to safely process narrative logic without resorting toeval(), representing a robust security pattern for data-driven applications. - [INDIRECT_PROMPT_INJECTION]: The skill architecture is designed to handle narrative data from external sources.
- Ingestion points: The
DialogueRunnerinreferences/runner.mdaccepts a JSONgraphcontaining expressions in"set"and"if"fields. - Boundary markers: The design assumes developer-authored content; no explicit content delimiters are specified in the templates.
- Capability inventory: The runner manages internal state via a variable dictionary and controls UI output.
- Sanitization: The
evaluatefunction implements a secure whitelist of operations using theastmodule, mitigating code injection risks from dialogue scripts.
Audit Metadata