agency-visual-storyteller
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard shell commands to gather project context.
- Evidence: The "Step 1: Story Strategy Development" section in SKILL.md uses
cat,ls, andgrepto read files inai/memory-bank/and list assets inpublic/images/brand/. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests content from external project files which may be attacker-controlled.
- Ingestion points: The agent reads data from
ai/memory-bank/brand-guidelines.mdandai/memory-bank/audience-research.md(SKILL.md). - Boundary markers: There are no boundary markers or instructions to ignore embedded commands within the files being read.
- Capability inventory: The skill demonstrates file system navigation and reading capabilities via
ls,cat, andgrep(SKILL.md). - Sanitization: No sanitization, filtering, or validation is performed on the content retrieved from external files before it is processed by the agent.
Audit Metadata