brief
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
uv runto execute a local shim script (scripts/invoke.py) and a library script ($LIBRARY/scripts/languages.py) to perform its core functions. - [DYNAMIC_EXECUTION]: The
scripts/invoke.pyscript is designed to discover and execute a local engine script (kntnt.py) by searching across common agent configuration directories (e.g.,~/.claude/skills). It invokes the engine usingsubprocess.run, passing user input through standard input. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external sources to draft or review writing briefs.
- Ingestion points: External material provided as text, file paths, or URLs (SKILL.md).
- Boundary markers: User-provided material is passed directly to the processing engine via stdin.
- Capability inventory: The skill has the ability to execute scripts via
uv runand write output to specified delivery files in the library. - Sanitization: The skill mitigates risks by strictly mapping external content to the 13-question template, identifying inferences, and marking missing information rather than executing instructions found in the material.
Audit Metadata