novel-ralph
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the agent to install the
novel-ralph-skillpackage using theuv tool installcommand. This package contains the necessary CLI tools for managing the novel's state and manuscript structure. These are vendor-provided resources intended for use with this skill. - [REMOTE_CODE_EXECUTION]: The setup instructions involve installing and executing code from the
novel-ralph-skillpackage. This process installs thenovelbinary to the user's environment, which is subsequently used to manage all phases of the writing process. - [COMMAND_EXECUTION]: The skill relies on frequent execution of the
novelCLI tool for state manipulation, drafting progress, and compiling manuscript files. For example, it usesnovel state set-chaptersto pass structured chapter plans to the tool as shell arguments. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it processes and analyzes untrusted data, specifically the user's story premise and the drafted novel content. Malicious instructions embedded in these texts could potentially influence the agent during its iterative review cycles (e.g., the "Spiteful Critic" or "Knitting Circle" passes). Sanitization is handled through the structured phase-based workflow.
- [DATA_EXPOSURE]: The skill manages character profiles, world-building data, and manuscript drafts within a local
working/directory. It reads from and writes tostate.tomlandlog.mdto maintain persistence across agent turns. Access is restricted to the skill's operating environment.
Audit Metadata