renpy-visual-novel-exporter
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves a legitimate purpose as a converter for visual novel developers, transforming Markdown-based stories into Ren'Py Script (.rpy) files.
- [COMMAND_EXECUTION]: The documentation references a local Python helper script (
helpers/python/export_to_renpy.py) used to process input files. This is standard behavior for a CLI-based utility included within a skill's package. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external manuscript data (e.g., story chapters). This introduces an attack surface where malicious instructions could be embedded in the story text to influence the conversion process. However, the scope is limited to text transformation.
- Ingestion points: User-provided Markdown files via the
--inputflag. - Boundary markers: No explicit delimiters or safety instructions for input processing are mentioned in the documentation.
- Capability inventory: The conversion process involves file writing to the local system (
--output). - Sanitization: Documentation does not specify how input text is sanitized during conversion to Ren'Py syntax.
Audit Metadata