story-project
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, unauthorized data access, or suspicious network activities were detected. The skill's behavior matches its described purpose as a routing tool.
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a gateway for user-provided natural language queries to determine the creative pipeline. 1. Ingestion points: User input prompts handled in the classification step in SKILL.md. 2. Boundary markers: None present. 3. Capability inventory: Limited to routing/calling other skills in the moai-story and moai-writer suite. 4. Sanitization: None present.
- [COMMAND_EXECUTION]: Documentation includes instructions for the user to install additional vendor plugins (moai-writer@moai-cowork). These are vendor-specific tools and do not involve unauthorized shell execution.
Audit Metadata