worldbuilding
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific markdown files (characters, lore, settings) to automate stubbing and consistency checks, creating a surface for potential instruction injection from project data.
- Ingestion points: Reads files from
characters/,settings/,themes/,factions/, andlore/directories as defined in SKILL.md. - Boundary markers: None explicitly defined in the provided instruction set to isolate untrusted data from the agent's core logic.
- Capability inventory: The skill is authorized to use the
writetool to create and modify files based on the content it parses. - Sanitization: No specific sanitization or content validation for the input data is described.
Audit Metadata