fiction-agent-update-manager
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python helper scripts and standard Git commands. These operations are restricted to the skill's specific repository and are used for security scanning and update management.\n- [EXTERNAL_DOWNLOADS]: The skill fetches updates from the vendor's official GitHub repository at
https://github.com/lensetek/Fiction-book-agent-skills. This is a vendor-controlled resource and represents normal application behavior.\n- [PERSISTENCE_MECHANISMS]: The skill supports a scheduled daily check via a cron expression. This persistence is transparently declared as a feature for the user to enable automated updates.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Git commit logs. The attack surface is protected by limiting downloads to the vendor's own repository and requiring explicit user authorization before any code is pulled into the local environment.
Audit Metadata