awesome-novel

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Several project management and testing scripts (sync-project.py, test_platforms.py, test_check_chapter.py) use subprocess.run() to execute local tools or git for versioning. These operations are limited to the skill's own directory and standard development commands.
  • [DYNAMIC_EXECUTION]: The script tools/style_render.py uses import to load the pathlib standard library module. This is used within a CLI tool for file path manipulation and does not represent an execution risk from external inputs.
  • [INDIRECT_PROMPT_INJECTION]: The system identifies an attack surface where users import existing novel samples. The skill explicitly instructs agents to 'clean' these samples by stripping out meta-instructions and prompt-like language before processing, providing a defense-in-depth against malicious content in novel data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 03:46 AM