baoyu-comic
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user content (text, files, or URLs) to generate comic storyboards and analysis, creating a surface for embedded instructions to potentially influence agent behavior.
- Ingestion points: User-provided source content is saved to
source-{slug}.mdand processed during the content analysis phase described inreferences/workflow.md. - Boundary markers: The prompt instructions do not specify the use of clear delimiters or warnings to ignore instructions within the ingested source material during analysis.
- Capability inventory: The skill leverages
read_file,write_file, and terminal commands (curl,test) to manage assets and analyze content. - Sanitization: While the skill instructs the agent to strip secrets from source content, it does not include explicit measures to sanitize against prompt injection attacks.
- [EXTERNAL_DOWNLOADS]: The workflow involves automatically downloading image files from URLs returned by the
image_generateplatform tool using thecurlcommand. - [COMMAND_EXECUTION]: The skill utilizes shell commands, specifically
curlfor downloading assets andtestfor verifying directory structures and file existence.
Audit Metadata