shared-world

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts scripts/build-index.ts and scripts/check-conflicts.ts import functionality from the Deno Standard Library via https://deno.land/std@0.208.0/fs/walk.ts. This is a well-known and trusted source for Deno modules.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external Markdown files to manage world bible content, creating an ingestion surface for potentially untrusted data.
  • Ingestion points: scripts/build-index.ts and scripts/check-conflicts.ts read all .md files within the provided world bible directory.
  • Boundary markers: The skill relies on structured Markdown headings and metadata fields, but lacks explicit delimiters to ignore instructions embedded in the fiction content.
  • Capability inventory: Scripts in scripts/add-entry.ts, scripts/build-index.ts, scripts/check-conflicts.ts, and scripts/init-world.ts perform file system read, write, and directory walk operations.
  • Sanitization: Input for new entries is processed through a slugify function to normalize filenames, and content parsing is restricted to specific regex matches for metadata and headers.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 11:09 AM
Security Audit — agent-trust-hub — shared-world