kelly-writer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute local Node.js management scripts (
generate_batch.mjsandexport_decisions.mjs) to handle content ingestion and file export tasks. These scripts are provided within the skill package. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided content to generate drafts, which is a core function of its content repurposing capabilities.
- Ingestion points: Untrusted content enters the system via the
--sourceparameter (supporting both file paths and raw text) in thescripts/generate_batch.mjsscript. - Boundary markers: The instructions explicitly direct the agent to use professional judgment, verify claims, and adhere to a "human-in-the-loop" review workflow. The dashboard acts as a functional boundary between generation and export.
- Capability inventory: The skill possesses the capability to write records to a Busabase instance and package processed content into local ZIP archives within the
exports/directory. - Sanitization: The skill implements path traversal protection in
scripts/lib/content-assets.mjsby usingpath.resolveand scope validation to ensure that all asset resolution is confined to the authorized project root.
Audit Metadata