table-tone
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user inputs (RPG narrations) and has the ability to write to the file system, which constitutes an indirect prompt injection surface.
- Ingestion points: The skill ingests user-supplied RPG scene descriptions, NPC dialogue, and GM narrations for analysis.
- Boundary markers: Absent; the instructions do not define specific delimiters or 'ignore' commands for the content being processed.
- Capability inventory: The skill can read from and write to 'context/output-config.md' and create new campaign-specific markdown files (e.g., '{campaign}-tone-{date}.md') to persist state.
- Sanitization: Absent; there are no explicit requirements in the instructions to sanitize, escape, or validate the user-provided text before it is saved to the file system.
Audit Metadata