fiction-layout-exporter
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute a local Python helper script (
helpers/python/generate_fiction_docx.py) to handle the conversion of markdown manuscripts into Word and PDF layouts. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting external, untrusted content from manuscript files, creating a surface for indirect instructions.
- Ingestion points: The primary ingestion point is
chapters/full_manuscript.md, which contains the text to be formatted. - Boundary markers: There are no specific delimiters or instruction-ignore warnings defined to isolate the manuscript content from the agent's instructions.
- Capability inventory: The skill facilitates file system writes in the
build/andweb_reader/directories and executes shell commands for document processing. - Sanitization: The skill instructions do not specify any validation or sanitization procedures for the input manuscript content prior to processing by the layout scripts.
Audit Metadata