peer-review
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as manuscripts and checklists, creating a potential surface for indirect prompt injection.
- Ingestion points: Multiple tools in
scripts/ingest local Markdown, JSON, and CSV files provided by the user. - Boundary markers:
SKILL.mddefines mandatory safety boundaries and human accountability gates that must be satisfied before processing unpublished content. - Capability inventory: Bundled tools are strictly limited to Python standard-library operations. The analysis shows no network capabilities, subprocess spawning, or dynamic code execution in any script.
- Sanitization:
scripts/_common.pyimplements centralized safety helpers that enforce file size limits, reject NUL bytes, validate path resolution (rejecting symlinks), and perform strict schema validation for all inputs.
Audit Metadata