story-webtoon-qc
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted image data and character references to generate revised prompts, creating a surface for indirect prompt injection.
- Ingestion points: Processes user-provided images (as described in
SKILL.mdStep 1 and 2) and character anchor data fromstory-character-sheet. - Boundary markers: No explicit delimiters or boundary markers are used to isolate untrusted visual content or character metadata.
- Capability inventory: The skill is limited to generating text prompts for future image creation; it does not possess system command execution or network capabilities.
- Sanitization: No sanitization or validation mechanisms are described for the visual data or character sheet inputs.
- [DATA_EXFILTRATION]: The skill references a local configuration directory to check tool availability.
- Evidence:
references/rubric-bridge.mdreferences the file path.moai/config/sections/design.yamlto verify the execution environment for thedesign-iteration-looptool.
Audit Metadata