story-deslop
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates text analysis by executing provided Node.js scripts (check-ai-patterns.js, check-degeneration.js, normalize-punctuation.js) against project files. Evidence: SKILL.md specifies calls to these scripts during Phase 1 and Phase 4 of the workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user-provided text for analysis and rewriting, which represents a potential attack surface. The processing is handled through sub-agents and local scripts that perform regular expression-based linting.
- [SAFE]: No malicious patterns, including credential theft or unauthorized network communication, were detected within the skill's instructions or scripts. All operations are local and align with the skill's stated purpose.
Audit Metadata