awesome-novel
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Several project management and testing scripts (sync-project.py, test_platforms.py, test_check_chapter.py) use subprocess.run() to execute local tools or git for versioning. These operations are limited to the skill's own directory and standard development commands.
- [DYNAMIC_EXECUTION]: The script tools/style_render.py uses import to load the pathlib standard library module. This is used within a CLI tool for file path manipulation and does not represent an execution risk from external inputs.
- [INDIRECT_PROMPT_INJECTION]: The system identifies an attack surface where users import existing novel samples. The skill explicitly instructs agents to 'clean' these samples by stripping out meta-instructions and prompt-like language before processing, providing a defense-in-depth against malicious content in novel data.
Audit Metadata